|
Solution Search:
|
Software Quality Resources
Threat modeling enhanced with misuse cases
Software security is a process that is tied to all the phases of SDLC, and misuse cases provide a mechanism to achieve that. It is created by architects in the requirements gathering/design phase by identifying the attacks to a use case and... More... May 4, 2006
Use cases, scenarios and user goals
the use case, or simply as data variations that could take place during execution. Use cases and misuse cases: Use cases don't need to include all system functionality details
Software requirements analysis: Five use case traps to avoid Threat modeling enhanced... More... May 3, 2007
Getting started with Web application misuse cases
application. Rather than outlining what a system should do (as with use cases), "misuse" cases outline what can be done to the system. It's sort of an inverse set of requirements for the system -- what NOT to have.
Apr 17, 2008
Secure SDLC: Integrating security into your software development life cycle
ID or only the last four digits of Social Security number will be displayed.
Prepare misuse cases: A misuse case is the opposite of use case. Its sole purpose is to identify how a use case should not behave. A misuse case should capture the type of attacks that... More... Mar 23, 2006
Dos and don'ts: Ensuring apps security from the get-go
threat modeling, specifying the intended operational environment, defining of use and misuse cases, adopting of secure coding techniques, and performing source-level security reviews including source code analysis," said Patterson. The same standards...
More...
Dec 13, 2005
Related Tips
Real World Web Security Problems and Solutions - input validation
fashion for this tip, I'm going to share with you some common and not-so-common Web-based input validation issues I've discovered.
The most interesting issue I've... More... Jun 19, 2009
Real World Web Security Problems and Solutions login weaknesses
login mechanism evaluated the user's Windows login status and ID and assuming they were logged in on the machine with a valid account access was granted...
More...
Jun 19, 2009
Real World Web Security Problems and Solutions - login weaknesses
login mechanism evaluated the user's Windows login status and ID and assuming they were logged in on the machine with a valid account access was granted...
More...
Jun 19, 2009
|