Other Implements or uses an Authentication Mechanism No Yes Yes Implements or uses an Authorization Mechanism No Yes Yes Implements a Communication Protocol No Yes Yes Sanitizes Input No Yes Yes Sanitizes Output No Yes Yes Applications Running on a non-Microsoft OS No additional properties. [None] [Not Applicable] Browser and ActiveX Plug-ins ActiveX No Yes Yes Browser Plug-in Object (BHO) No Yes Yes Browser Client Code Type Unmanaged No Kernel Thread No additional properties. [None] [Not Applicable] Managed Application Code Type Managed No OS Process No additional properties. [None] [Not Applicable] Thick Client Code Type Unmanaged This value cannot be changed Thread No additional properties. [None] [Not Applicable] Virtual Machine No additional properties. [None] [Not Applicable]
Web Server No additional properties. [None] [Not Applicable] Web Application No additional properties. [None] [Not Applicable] Web Service No additional properties. [None] [Not Applicable] Win32 Service Code Type Unmanaged Yes Managed Windows Process Code Type Managed No Context Local Yes Web 'Documents Library' capability Yes Yes No 'Enterprise Authentication' capability Yes Yes No Internet (Client & Server)' capability Yes Yes No 'Internet (Client)' capability Yes Yes No 'Location' capability Yes Yes No 'Microphone' capability Yes Yes No Library' capability Yes Yes No 'Pictures Library' capability Yes Yes No 'Private Networks (Client & Server)' capability Yes Yes No
'Proximity' capability Yes Yes No 'Removable Storage' capability Yes Yes No 'Shared User Certificates' capability Yes Yes No 'Text Messaging' capability Yes Yes No 'Videos Library' capability Yes Yes No 'Webcam' capability Yes Yes No 4 Element Properties for Processes Properties for Data Storage Element Name Attribute Name Additional Attribute Values Modifiable? Generic Data Store Stores Credentials No Yes Yes Stores Log Data No Yes Yes Encrypted No Yes Yes Signed No Yes Yes Access Yes Yes No Removable Storage Yes Yes No
Messaging Data (Mail, IM, SMS…) Yes Yes No SIM Storage Yes Yes No Other Data Yes Yes No File System File System Type NTFS Yes ExFAT FAT ReFS IFS UDF Table 5 Properties for Storage Properties for Data Flow Element Name Attribute Name Additional Attribute Values Modifiable? Generic Data Flow Physical Network Wire Yes Wi-Fi Bluetooth 2G - 4G Source Authenticated No Yes Yes Destination Authenticated No Yes Yes Provides Confidentiality No Yes Yes Provides Integrity No Yes Yes
Transmits XML No Yes Yes Contains Cookies Yes Yes No SOAP Payload No Yes Yes REST Payload No Yes Yes RSS Payload No Yes Yes JSON Payload No Yes Yes ALPC No additional properties. [None] [Not Applicable] Binary No additional properties. [None] [Not Applicable] HTTP No additional properties. [None] [Not Applicable] HTTPS No additional properties. [None] [Not Applicable] IOCTL Interface No additional properties. [None] [Not Applicable] IPsec No additional properties. [None] [Not Applicable] Named Pipe No additional properties. [None] [Not Applicable] RPC / DCOM No additional properties. [None] [Not Applicable] SMB No additional properties. [None] [Not Applicable] UDP No additional properties. [None] [Not Applicable]
AppContainer Boundary Corporate Network Sandbox Boundary IE Boundary AppContainer Boundary No additional properties. [None] [Not Applicable] Corpnet Trust Boundary (Border) No additional properties. [None] [Not Applicable] Internet Boundary (arc) No additional properties. [None] [Not Applicable] Internet Boundaries Boundary Type Internet Boundary No Low Integrity Level Sandbox Yes Yes No App Container Sandbox Yes Yes No JavaScript Sandbox Yes Yes No Flash Sandbox Yes Yes No Machine Trust Boundary (Arc) Boundary Type Machine Boundary No Other Browser’s' Boundaries Boundary Type No Chrome JavaScript Sandbox Yes Yes No Chrome Sandbox Yes Yes No Firefox JavaScript Sandbox Yes Yes No