Question: Activity 5 Specify and address SIX risks. To achieve this, you must review the data flow diagram created in Activity 4 to identify any areas

 Activity 5 Specify and address SIX risks. To achieve this, you

Activity 5 Specify and address SIX risks. To achieve this, you must review the data flow diagram created in Activity 4 to identify any areas of intentional or unintentional exploitation of the data flows using STRIDE. Identify any conflicts towards security or trust expectations specified in Activity 1. When using STRIDE, this will help you to identify threats and potential vulnerabilities that may be exploited. You are expected to use ONE or more Attacker personas representing a potential attacker exploiting a vulnerability. Provide a name and description for each threat and vulnerability, and provide related details for each (e.g. the attacker, assets of concern, likelihood and severity, etc)- Tip: Align the threats with something like those found in CAPEC or ATT&CK. A threat and vulnerability combination will become a risk, where each risk must be provided with a risk name and description (misuse case). Each of the SIX risks identified should be scored and rated. Apply suitable risk responses for each risk. (Depending on the response, this will relate to a countermeasure supported by a requirement in the Activity 6)

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Mathematics Questions!