课程: Threat Modeling: Denial of Service and Expansion of Authority

今天就学习课程吧!

今天就开通帐号,24,700 门业界名师课程任您挑!

Security by design

Security by design

- [Host] Each course in this learning path is designed to stand on its own and to be a helpful and deep guide to threats and threat modeling. Some people talk about Stride as a taxonomy or categories, and it's easy to fall into that trap. You can use it to think about the problems you hear about even when they don't fit into a single cubbyhole, more valuably STRIDE as a model of what can go wrong. You can use it as a monic to help you answer the question, what can go wrong? That question is, at the heart of threat modeling, thinking about new systems we're building to make them more secure, you now have two powerful tools in your toolbox. The four question framework helps us structure the work we do in threat modeling by asking, what are we working on? What can go wrong? What are we going to do about it? And did we do a good job? And Stride helps us answer again that question of what can go wrong? These two tools may be all you need. Many people will use the four question framework…

内容