Ivan Ristić: SSL Threat Model

SSL is easy to use but also very easy to use incorrectly. The ecosystem, which is built of the specifications, the implementations, the CAs and the PKI, is full of traps, each of which is very easy to fall into. Once I started to spend significant time thinking about SSL I set out to build a model of the ecosystem, for my own education and to ensure that I understand it all. That's how I arrived t

[kgbu]

脅威のマップがあれば、自分たちの対策がどれくらいカバーしているかを把握するのに役立つし、インシデントの分類にも使えそうだ。つか、インシデントのタグの分析するとこういうものが出てくることもあるかもな。