Threat Analysis & Risk Assessment (TARA) Framework for Neural Security
Project description
qtara
Threat Analysis & Risk Assessment (TARA) framework for Neural Security.
The qtara package provides programmatic access to the TARA registry (103 techniques), NISS (Neural Impact Scoring System) calculators, physics feasibility tiers, and STIX 2.1 exporters.
Installation
pip install qtara
Features
- TARA Registry: Query 103 verified BCI threat techniques with full enrichment data.
- Physics Feasibility Tiers: Filter techniques by physics feasibility (T0: feasible now, T1: mid-term, T2: far-term, T3: no physics gate).
- NISS Scorer: Calculate neural impact scores based on physics-derived metrics.
- CVSS + Neurorights: Access CVSS 4.0 mappings and neuroright impact data per technique.
- STIX 2.1: Export threat data for industry-standard security tools.
- CLI: Instant access to threat intelligence from the terminal.
Quick Start
from qtara.core import TaraLoader
loader = TaraLoader()
loader.load()
# List all techniques
techniques = loader.list_techniques()
print(f"{len(techniques)} techniques loaded")
# Get a specific technique
t = loader.get_technique("QIF-T0001")
print(t.attack, t.severity, t.physics_feasibility.tier_label)
# Filter by physics tier
tier0 = loader.list_by_physics_tier(0)
print(f"{len(tier0)} techniques feasible now")
# Filter by severity
critical = loader.list_by_severity("critical")
print(f"{len(critical)} critical techniques")
# Get statistics
stats = loader.get_statistics()
print(stats)
CLI Usage
# List all techniques
qtara list
# Filter by physics feasibility tier (0=feasible now, 1=mid-term, 2=far-term, 3=no gate)
qtara list --tier 0
# Filter by severity
qtara list --severity critical
# Filter by neural band
qtara list --band N1
# Get detailed info for a technique
qtara info QIF-T0001
# Show statistics
qtara stats
# Export to STIX 2.1
qtara stix --output threats.json
# Get citation
qtara cite
Physics Feasibility Tiers
Each technique is classified by its physics feasibility:
| Tier | Label | Timeline | Description |
|---|---|---|---|
| T0 | feasible_now | now | Attack is possible with current technology |
| T1 | mid_term | 5-10 years | Requires technology advances expected within a decade |
| T2 | far_term | 10+ years | Requires fundamental breakthroughs |
| T3 | no_physics_gate | n/a | No physics constraint (software/protocol attacks) |
Development
git clone https://github.com/qinnovates/qinnovate
cd packaging/qtara
pip install -e .
License
MIT
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file qtara-0.2.0.tar.gz.
File metadata
- Download URL: qtara-0.2.0.tar.gz
- Upload date:
- Size: 108.1 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
c25f4f2db75abba0bcd6693bc75be4839cbc66dd8a79208861d7e4d4ed639d85
|
|
| MD5 |
29cb5fd4c14fae02e42b320a2d12c2fe
|
|
| BLAKE2b-256 |
846435bac01bb368d0ca352b791875c8fb1ded05f46a8f37b8725dc3502a2055
|
Provenance
The following attestation bundles were made for qtara-0.2.0.tar.gz:
Publisher:
publish-pypi.yml on qinnovates/qinnovate
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
qtara-0.2.0.tar.gz -
Subject digest:
c25f4f2db75abba0bcd6693bc75be4839cbc66dd8a79208861d7e4d4ed639d85 - Sigstore transparency entry: 965130280
- Sigstore integration time:
-
Permalink:
qinnovates/qinnovate@4c5d25f58790a0e8007cf62c8cb4520a40b770c4 -
Branch / Tag:
refs/heads/main - Owner: https://github.com/qinnovates
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish-pypi.yml@4c5d25f58790a0e8007cf62c8cb4520a40b770c4 -
Trigger Event:
push
-
Statement type:
File details
Details for the file qtara-0.2.0-py3-none-any.whl.
File metadata
- Download URL: qtara-0.2.0-py3-none-any.whl
- Upload date:
- Size: 110.7 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
209a6cb4bad2363b0be3b88d8979bdbee586676f29b77ee5b14d292e72259857
|
|
| MD5 |
e7ba534b36f7637650d45c0771df7547
|
|
| BLAKE2b-256 |
04d1592484ce6e62820d8f1d6aa6898198ce613b445dd9c2d21aba10a69114b9
|
Provenance
The following attestation bundles were made for qtara-0.2.0-py3-none-any.whl:
Publisher:
publish-pypi.yml on qinnovates/qinnovate
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
qtara-0.2.0-py3-none-any.whl -
Subject digest:
209a6cb4bad2363b0be3b88d8979bdbee586676f29b77ee5b14d292e72259857 - Sigstore transparency entry: 965130348
- Sigstore integration time:
-
Permalink:
qinnovates/qinnovate@4c5d25f58790a0e8007cf62c8cb4520a40b770c4 -
Branch / Tag:
refs/heads/main - Owner: https://github.com/qinnovates
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish-pypi.yml@4c5d25f58790a0e8007cf62c8cb4520a40b770c4 -
Trigger Event:
push
-
Statement type: