Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Free Learning

Threat Modeling Gameplay with EoP

You're reading from Threat Modeling Gameplay with EoP A reference manual for spotting threats in software architecture

Product type Paperback

Published in Aug 2024

Publisher Packt

ISBN-13 9781804618974

Length 256 pages

Edition 1st Edition

Concepts

Software Architecture

Author (1):

Brett Crawley

View More author details

Table of Contents (18) Chapters

Preface

1. Chapter 1: Game Play FREE CHAPTER

2. Chapter 2: Spoofing

3. Chapter 3: Tampering

4. Chapter 4: Repudiation

5. Chapter 5: Information Disclosure

6. Chapter 6: Denial of Service

7. Chapter 7: Elevation of Privilege

8. Chapter 8: Privacy

9. Chapter 9: Transfer

10. Chapter 10: Retention/Removal

11. Chapter 11: Inference

12. Chapter 12: Minimization

13. Glossary

14. Further Reading

Games

15. Licenses for third party content

CWE:

16. Index

Why subscribe?

17. Other Books You May Enjoy

8. of Spoofing

An attacker could steal credentials stored on the server and reuse them (for example, a key is stored in a world-readable file).

Threat
	You’ve stored a private key in a PEM file that isn’t encrypted, and access isn’t restricted.
CAPEC	CAPEC-191 - Read Sensitive Constants Within an Executable CAPEC-150 - Collect Data from Common Resource Locations
ASVS	2.10.4 - Ensure Keys and Secret material are stored securely and ensure that secrets aren’t hardcoded in source files
CWE	CWE-257 - Storing Passwords in a Recoverable Format CWE-256 - Plaintext Storage of a Password CWE-522 - Insufficiently Protected Credentials CWE-798 - Use of Hard-coded Credentials ...

The rest of the chapter is locked

Register for a free Packt account to unlock a world of extra content!

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at $19.99/month. Cancel anytime

Authors (1)

Brett Crawley

Brett Crawley

Brett Crawley is a principal application security engineer, (ISC2) CISSP, CSSLP, and CCSP certified, the project lead on the OWASP Application Security Awareness Campaigns project, and the author of the OSTERING blog on security. He has published a Miro template for threat modeling with the Elevation of Privilege card game and also published the CAPEC S.T.R.I.D.E. mapping mind maps and other resources. With over 10 years of application security experience and over 25 years of software engineering experience, he works with teams to define their security best practices and introduce security by design into their existing SDLC, and as part of this initiative, he trains teams in threat modeling because good design is of key importance. He is also an advocate for using a data-driven approach to AppSec, to help identify the business-critical components, thereby optimizing the reduction of risk to the organization.

See other products by Brett Crawley

Personalised recommendations for you

Based on your interests and search pattern

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m