A Guide to Threat Modelling for Developers

Secure software design, little and often This article provides clear and simple steps to help teams that want to adopt threat modelling. Threat modelling is a risk-based approach to designing secure systems. It is based on identifying threats in order to develop mitigations to them. With cyber security risk increasing and enterprises becoming more aware of their liabilities, software development t

[efcl]

技術者向けの脅威モデリング。 DDDにおけるEvent stormingを脅威モデリングにしている感じ。 脅威分析が難しく感じられるという話とか、既存のソリューションはチームをセキュリティから遠ざけるものが多いとか、チームで