Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Free Learning

Threat Modeling Gameplay with EoP

You're reading from Threat Modeling Gameplay with EoP A reference manual for spotting threats in software architecture

Product type Paperback

Published in Aug 2024

Publisher Packt

ISBN-13 9781804618974

Length 256 pages

Edition 1st Edition

Concepts

Software Architecture

Author (1):

Brett Crawley

View More author details

Table of Contents (18) Chapters

Preface

1. Chapter 1: Game Play FREE CHAPTER

2. Chapter 2: Spoofing

3. Chapter 3: Tampering

4. Chapter 4: Repudiation

5. Chapter 5: Information Disclosure

6. Chapter 6: Denial of Service

7. Chapter 7: Elevation of Privilege

8. Chapter 8: Privacy

9. Chapter 9: Transfer

10. Chapter 10: Retention/Removal

11. Chapter 11: Inference

12. Chapter 12: Minimization

13. Glossary

14. Further Reading

Games

15. Licenses for third party content

CWE:

16. Index

Why subscribe?

17. Other Books You May Enjoy

Retention/Removal

Many of the data privacy regulations require that data should be retained or removed based on certain criteria:

Legal requirements concerning financial data may stipulate the need for it to be retained for up to 10 years
The storage limitation principle implies that Personally Identifiable Information (PII) should only be retained for the time necessary to process the data for the purpose intended or for as long as the data is in the public interest, or for research but after it has been anonymized

Figure 10.1: Files are retained until no longer needed and are then destroyed

In this chapter, we’re going to look at the privacy regulations that should be observed with regard to retention and the removal of data from your systems.

As with the chapter on privacy, in this chapter and the other T.R.I.M. chapters, the references used will be to the GDPR, CCPA, CPRA, and OECD documents that have had a strong influence in...

The rest of the chapter is locked

Register for a free Packt account to unlock a world of extra content!

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at $19.99/month. Cancel anytime

Authors (1)

Brett Crawley

Brett Crawley

Brett Crawley is a principal application security engineer, (ISC2) CISSP, CSSLP, and CCSP certified, the project lead on the OWASP Application Security Awareness Campaigns project, and the author of the OSTERING blog on security. He has published a Miro template for threat modeling with the Elevation of Privilege card game and also published the CAPEC S.T.R.I.D.E. mapping mind maps and other resources. With over 10 years of application security experience and over 25 years of software engineering experience, he works with teams to define their security best practices and introduce security by design into their existing SDLC, and as part of this initiative, he trains teams in threat modeling because good design is of key importance. He is also an advocate for using a data-driven approach to AppSec, to help identify the business-critical components, thereby optimizing the reduction of risk to the organization.

See other products by Brett Crawley

Personalised recommendations for you

Based on your interests and search pattern

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m