TG3 – Attack Methods & Standards Vulnerability Review

The first pillar of the Technical Assurance Framework maintains a common understanding of how identity and (Qualified) trust services can be attacked. A dedicated Standards Vulnerability Review subgroup examines emerging regulations and standards before security practices mature.

• Develop and maintain structured Attack Methods and the Attack Catalogue.
• Define prerequisites, test conditions, reproducibility and success criteria.
• Assess Attack Quotation / Attack Potential and evolve quotation factors with attacker capabilities.
• Review young identity and trust standards for vulnerabilities, ambiguities, unsafe assumptions and exploitable gaps.
• Integrate new tools, techniques and review findings into the technical baseline.
• Conduct inter-laboratory validation and joint technical testing campaigns.

• Attack Methods and Attack Catalogue
• Attack Quotation Methodology and Attack Quotations
• ID Standards Vulnerability Review Reports
• Testing Methodologies developed with TG4

The Steering Committee coordinates the groups and validates critical deliverables before adoption or external use. Confidentiality rules apply to operational information and its distribution.