March 2003
Intermediate to advanced
912 pages
27h 17m
English
As a focus for the discussion we describe some common scenarios and discuss the range of security requirements that might be associated with them. We then go on to list the various styles of threat. A system design should have an associated risk analysis where the designers' assumptions of the risks to the system are stated, together with whether they are countered in the design. It should be clear which threats a system is supposed to be able to withstand and which are not addressed.
A principal invokes a service. This may be in order to access some object which is managed by the service but to which the principal may have access rights. The service must authorize the ...
Read now
Unlock full access