7 februarie 2012 20:48
My system interacts with several other systems that are outside of my control, so I used the External Interactor type in my DFD. For External Interactors the tool only generates Spoofing and Repudiation threat types but my application is essentially hosed if some of these services are unavailable.
Is it possible to add a threat type to a component, or have I identified these items incorrectly?
7 februarie 2012 21:12I think I answered my own question. I recorded the denial of service threat on the data flow between my process and the external interactor.
- Marcat ca răspuns de SDL TeamModerator 9 februarie 2012 01:29
9 februarie 2012 00:22ProprietarYup, you go it.