我们保举一条遍及使用的设计方法,用于查寻和纠正潜在的服务安全问题:安全威胁建模(Security Threat Modeling)。在安全威胁建模中,我们要思量每一条潜在的安全威胁,并且相应使成为事实得当的缓和方案。
基于16个网页-相关网页
Threat modeling is composed of three high-level steps: understanding the adversary's view, characterizing the security of the system, and determining threats.
威胁模型是由三个高阶步骤所组成:了解敌人的观点、描绘系统安全性的特徵,以及判断威胁来源。
It is therefore important to understand all aspects of security, from the process of threat modeling during the design phase of your application, to its eventual deployment and ongoing maintenance.
因此,了解安全性的各个方面(从应用程序设计阶段期间的威胁建模过程到应用程序的最终部署和不断的维护)非常重要。
应用推荐