kubescape/scapepkg/score/frameworkdict.json

{
    "developer_framework": {
        "Writable hostPath mount": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Compromised images in registry": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Exposed dashboard": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Network mapping": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Access container service account": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Access Kubelet API": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Cluster-admin binding": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Kubernetes CronJob": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "SSH server running inside container": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Pod / container name similarity": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Cluster internal networking": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Access Kubernetes dashboard": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Privileged container": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "hostPath mount": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Instance Metadata API": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Applications credentials in configuration files": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        }
    },
    "MITRE": {
        "Writable hostPath mount": {
            "baseScore": 8.0,
            "improvementRatio": 0.5
        },
        "Sidecar injection": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Compromised images in registry": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Access tiller endpoint": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Data Destruction": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Resource Hijacking": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Access the Kubernetes API server": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Exposed dashboard": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Backdoor container": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Network mapping": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Images from private registry": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Mount service principal": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Access container service account": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Malicious admission controller (validating)": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Access Kubelet API": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Vulnerable application": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Application exploit (RCE)": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Cluster-admin binding": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Kubernetes CronJob": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "SSH server running inside container": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "List Kubernetes secrets": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Pod / container name similarity": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Cluster internal networking": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Exposed sensitive interfaces": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Bash/cmd inside container": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Clear container logs": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Access Kubernetes dashboard": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "New container": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Privileged container": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "CoreDNS poisoning": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "hostPath mount": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Instance Metadata API": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Malicious admission controller (mutating)": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Exec into container": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Delete Kubernetes events": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Applications credentials in configuration files": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        }
    },
    "NSA": {
        "Control plane hardening": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Immutable container filesystem": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Non-root containers": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        },
        "Host PID/IPC privileges": {
            "baseScore": 1.0,
            "improvementRatio": 1.0
        }
    }
}