実践的なパターン: テストの容易性を高める設計

Threat Modeling Uncover Security Design Flaws Using The STRIDE Approach Shawn Hernan and Scott Lambert and Tomasz Ostwald and Adam Shostack Contents Designing Secure Software Threat Modeling and STRIDE Data Flow Diagrams A Sample System Applying STRIDE to the Fabrikam Analyzer Database Analyzing Data Flows and Data Stores Analyzing Processes Mitigating the Threats Finding Manifestations of Threats

[k-takahashi]

『この記事では、マイクロソフトの Security Engineering and Communications グループが策定した、脅威のモデル化を行う系統的手法を説明』