Questions tagged [threat-modeling]

The process of describing possible threats and analyzing their possible affect on target systems.

5 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
2
votes
0answers
2k views

Microsoft Threat Modeling tool: how to avoid Spoofing of Destination Data Store

I have a threat model with a Cloud Storage entity an Managed Application which accesses it. Here is the diagram: The Microsoft Threat Modeling Tool says in the report that: Cloud Storage may be ...
1
vote
0answers
32 views

SeaSponge Report Generation

I am trying out SeaSponge, a recently developed threat modelling tool which looks interesting. The entry is similar enough to Microsoft's SDL Threat Modelling Tool. However when I click on "Reports" ...
1
vote
0answers
170 views

Identifying recon in web

I recently deployed mod_security module in my Apache Web Server. I know the OWASP CRS rules include tags to categorize attacks but I want to make higher level categories, particularly to identify ...
1
vote
0answers
51 views

Informational security model models and life-cycle

NSM model from sans.org is vendor neutral,that's good, but I need more detail and complexity model. Don't want to invent a bicycle and looking for complete solution in this field.Looking not for blog ...
0
votes
1answer
80 views

Are password managers the best way to achieve identity compartmentalization online?

I've been using a well-known password manager to create several identities for use on each web service I sign up to. I had the idea of creating 3+ email addresses with strong passwords consisting of ...