The process of describing possible threats and analyzing their possible affect on target systems.

learn more… | top users | synonyms

1
vote
1answer
36 views

Threat Modelling Application Decomposition

I am doing a piece of work on a imaginary device which allows the user to lock/unlock their vehicle and access a wireless hotspot in their car using an application on their smartphone via bluetooth. ...
0
votes
0answers
25 views

What are the consequences of revealing OAuth2 client secret?

Basing on this post I understand that client secret is used in "Authorization code" flow to: Create authorization request for registered domain Exchange returned code for actual auth token ...
0
votes
0answers
36 views

Application of digital watermarking for session hijack

I know digital watermarking can protect the media from man-in-middle and replay attack. Is it good also for session hijack attack or phishing attack?