4 ms·
Web Application Threat Model
- mahmud 17y agoThreat modeling is a pain in the ass, doubly so if you're using an automated tool. Simple, platform and software-specific checklists might be better. Here is a generic one as well. http://www.sans.org/reading_room/whitepapers/securecode/a_security_checklist_for_web_application_design_1389 http://www.sans.org/reading_room/whitepapers/securecode/a_se...
- joubert 17y agoI want to vomit when I read the word "stakeholders".