Transcription of Advanced Threat Modelling Knowledge Session
{{id}} {{{paragraph}}}
Example: dental hygienist
Advanced Threat Modelling Knowledge Session
Copyright The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. The OWASP Foundation OWASP Threat Modeling Architecting & Designing with Security in Mind Venkatesh Jagannathan OWASP-Chennai Chapter Leader OWASP Agenda Introduction to Threat Modeling Precursors to Threat Modeling Threat Modeling How-To Test Focused Threat Modeling Alternate Threat Models Estimating Threat Modeling for Applications OWASP Introduction to Threat Modeling Threat Modeling: A systematic & structured security technique, used to identify the security objectives, threats & vulnerabilities of an application, to help make design and engineering decisions, and determine where to prioritize efforts in designing, developing and deploying secure applications It s a day-to-day phenomenon for all of us Assets ( Photos, Jewelry) Architecture/Design of you home Attackers (Burglary) Natural Calamities Focus on Architecture/Design driven Threat modeling OWASP WHY Threat Model Changing Landscape of Security Data from any Application(s) Hackers
A – Auditing Is all access/modifications etc tracked for security related evidences? M – Management Session – Is interaction between the user & the web app (session) ... 0 = Advanced programming & networking knowledge 5 = Malware exists on the Net, or any tolls avaiable 10 = Just a web browser is enough
Loading..
Tags:
Information
Domain:
Source:
Link to this page:
Please notify us if you found a problem with this document: