Security
Related to information disclosure in the STRIDE[2] model for performing threat-modeling analyses:
[2] STRIDE refers to the six threat categories that are examined when performing a security threat model against an application. STRIDE stands for Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, and Elevation of privilege. More information on STRIDE and performing threat modeling can be found in the book Writing Secure Code, Second Edition (Microsoft Press 2003).
Is access to sensitive data secured?
Is sensitive information encrypted?
Are users of the data restricted to what they can access?
Do you offer security features in your application?
Get Privacy What Developers and IT Professionals Should Know now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
