January 2023
Intermediate to advanced
214 pages
3h 43m
Chinese
Content preview from 威胁建模：安全设计中的风险识别和规避
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
系统建模 | 59
用食物和饮料激励行为者
带甜甜圈、比萨饼（取决于一天中的时间）、咖啡或其他小吃。食品和饮料
在建立信任和吸引与会者讨论棘手的话题方面有神奇的效果。
获得领导的认同
如果参会者知道自己的管理团队正在参加此活动，他们会感到很自在，并
分享他们的想法和主意。
创建系统模型时，无论类型如何，都可以选择将其绘制在白板或虚拟白板应用
程序中，然后将其转换为你喜欢的绘图包。但是你不必总是手动操作，要知
道在线和离线实用程序
注 9
今天都是可用的，使你无须先手动绘制模型即可创建
模型。
1
如果使用这些绘图包中的任何一个，则应提出自己的方法，如前所述，为每个
元素添加元数据注释。你可以在图本身中以文本框或标注的形式执行此操作，
但这可能会使图变得混乱。一些绘图应用程序执行对象和连接的自动布局，这
在复杂的图中看起来像意大利面条。你也可以在自己喜欢的文本编辑器中创建
一个单独的文档，并为图中显示的每个元素提供必要的元数据。图表和文本文
档的组合成为“模型”，使人们能够执行分析以识别威胁和缺陷。
1.4 好的系统模型是什么样子的
尽管你已尽力而为，但是由于你拥有太多信息，甚至是不正确的信息，因此可
能会导致复杂性。有时，模型本身的潜在详细程度，以及随后需要对模型进行
分析所需的大量工作，是从所有战斗中转移过来的可喜现象。另外，你的环境
或细分市场可能需要极高的详细程度。例如，某些行业（例如，运输或医疗设
备）需要更高的分析度以解决更高的保证度。但是，对于大多数人来说，威胁
建模通常被视为对其他看似更关键的任务不熟悉、不安或不受欢迎。但是到目 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.