[Week 11] Perform a Security Assessment #61

Open
opened 2026-05-11 10:23:34 +02:00 by marfavi · 0 comments
Owner

1) Perform a Security Assessment

The following general steps will guide you through a security assessment. Consider using them as steps in a report. The report will become a section in your final project report.

A. Risk Identification

  1. Identify assets (e.g. web application)
  2. Identify threat sources (e.g. SQL injection)
  3. Construct risk scenarios (e.g. Attacker performs SQL injection on web application to download sensitive user data)

B. Risk Analysis

  1. Determine likelihood
  2. Determine impact
  3. Use a Risk Matrix to prioritize risk of scenarios
  4. Discuss what are you going to do about each of the scenarios
## 1) Perform a Security Assessment The following general steps will guide you through a security assessment. Consider using them as steps in a report. The report will become a section in your final project report. ### A. Risk Identification 1. Identify assets (e.g. web application) 1. Identify threat sources (e.g. SQL injection) 1. Construct risk scenarios (e.g. Attacker performs SQL injection on web application to download sensitive user data) ### B. Risk Analysis 1. Determine likelihood 1. Determine impact 1. Use a Risk Matrix to prioritize risk of scenarios 1. Discuss what are you going to do about each of the scenarios
marfavi added this to the MiniTwit project 2026-05-11 10:23:37 +02:00
Commenting is not possible because the repository is archived.
No milestone
No project
No assignees
1 participant
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
DevOpps/minitwit#61
No description provided.