The process of describing possible threats and analyzing their possible affect on target systems.

learn more… | top users | synonyms

1
vote
0answers
15 views

SeaSponge Report Generation

I am trying out SeaSponge, a recently developed threat modelling tool which looks interesting. The entry is similar enough to Microsoft's SDL Threat Modelling Tool. However when I click on "Reports" ...
1
vote
0answers
41 views

Identifying recon in web

I recently deployed mod_security module in my Apache Web Server. I know the OWASP CRS rules include tags to categorize attacks but I want to make higher level categories, particularly to identify ...
1
vote
0answers
29 views

Informational security model models and life-cycle

NSM model from sans.org is vendor neutral,that's good, but I need more detail and complexity model. Don't want to invent a bicycle and looking for complete solution in this field.Looking not for blog ...
0
votes
0answers
39 views

Mitigation for web service that may impersonate the context of native application?

I am trying to create threat model, and I have one of the threat listed as follows: Web Service - may be able to impersonate the context of Native Application. Can some one please help to ...