martedì 7 febbraio 2012 20:48
My system interacts with several other systems that are outside of my control, so I used the External Interactor type in my DFD. For External Interactors the tool only generates Spoofing and Repudiation threat types but my application is essentially hosed if some of these services are unavailable.
Is it possible to add a threat type to a component, or have I identified these items incorrectly?
Tutte le risposte
martedì 7 febbraio 2012 21:12I think I answered my own question. I recorded the denial of service threat on the data flow between my process and the external interactor.
- Contrassegnato come risposta SDL TeamModerator giovedì 9 febbraio 2012 01:29
giovedì 9 febbraio 2012 00:22ProprietarioYup, you go it.