O'Reilly logo

Privacy What Developers and IT Professionals Should Know by J. C. Cannon

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Security

Related to information disclosure in the STRIDE[2] model for performing threat-modeling analyses:

[2] STRIDE refers to the six threat categories that are examined when performing a security threat model against an application. STRIDE stands for Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, and Elevation of privilege. More information on STRIDE and performing threat modeling can be found in the book Writing Secure Code, Second Edition (Microsoft Press 2003).

  • Is access to sensitive data secured?

  • Is sensitive information encrypted?

  • Are users of the data restricted to what they can access?

  • Do you offer security features in your application?

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required