The process of describing possible threats and analyzing their possible affect on target systems.

learn more… | top users | synonyms

3
votes
2answers
59 views

Connection between “Security Requirements Engineering”, “Risk Analysis” and “Threat Modeling”

I am trying to figure out how the above concepts fit in together. As i understood it Security Requirements Engineering (SRE), Risk Analysis (RA) and Threat Modeling (TM) are methods that ultimately ...
0
votes
0answers
35 views

What are the consequences of revealing OAuth2 client secret?

Basing on this post, I understand that the client secret is used in the "Authorization code" flow to: Create an authorization request for a registered domain Exchange the returned code for actual ...
0
votes
0answers
42 views

Application of digital watermarking for session hijack

I know digital watermarking can protect the media from man-in-middle and replay attack. Is it good also for session hijack attack or phishing attack?
-2
votes
0answers
19 views

What is threat tree in threat modeling?

The OWASP Application Threat Modeling, quoting step 2 says specifically: These threats can be identified further as the roots for threat trees; there is one tree for each threat goal. what is ...