SecurityRatty: tag: playsound

SEARCH RESULTS

Showing 1-2 of 2 records

The Trouble with Threat Modeling

2007-09-26 19:11:00 by sdl in The Security Development Lifecycle

...PlaySound Threat Model , where he said Let's look at a slightly more interesting case where threat modeling exposes an issue. Youch! But as I wrote in a comment on that post, What you've been doing here is walking through a lot of possibilities. Some of those turn out to be uninteresting, and we learn something. Others (as we've discussed in...

Tags: threat, threat models, threat model, reasons threat, service threat, term threat, threat effectively, playsound threat model, development process

STRIDE chart

2007-09-11 23:18:00 by sdl in The Security Development Lifecycle

...playsound I wanted to chime in and offer up this handy chart that we use. It's part of how we teach people to go from a diagram to a set of threats. We used to ask them to brainstorm, and have discovered that that works a lot better with some structure Property Threat Definition Example Authentication S poofing Impersonating...