The process of describing possible threats and analyzing their possible affect on target systems.

learn more… | top users | synonyms

1
vote
1answer
33 views

Connection between “Security Requirements Engineering”, “Risk Analysis” and “Threat Modeling”

I am trying to figure out how the above concepts fit in together. As i understood it Security Requirements Engineering (SRE), Risk Analysis (RA) and Threat Modeling (TM) are methods that ultimately ...
0
votes
0answers
28 views

What are the consequences of revealing OAuth2 client secret?

Basing on this post I understand that client secret is used in "Authorization code" flow to: Create authorization request for registered domain Exchange returned code for actual auth token ...
0
votes
0answers
39 views

Application of digital watermarking for session hijack

I know digital watermarking can protect the media from man-in-middle and replay attack. Is it good also for session hijack attack or phishing attack?