Overview Consider a three-tier application that performs the following functions: - A lecturer submits questions and ans
Posted: Thu Jul 14, 2022 2:06 pm
Overview Consider a three-tier application that performs the following functions: - A lecturer submits questions and answers to a repository - Questions should have annotations defining their area of knowledge. - A student creates mock exams on a particular area of knowledge based on existing questions. Follow this simplified process as you threat model: - Draw a data flow diagram and highlight the trust boundaries. - Use STRIDE threat model to find threats in the application - Address each threat in some way.