none
Asset tagging? RRS feed

  • Question

  • What's the best way to identify the data assets in flight?

    Example: it's fine to have a flow tagged "HTTPS."  What I really want is a way to identify what is being sent over that connection.  So far, I've been appending it to the label, as in: "HTTPS: QR code," but this gets unwieldy very quickly when you have lots of different types of data flowing.

    It seems like this should be a standard attribute.

    <object height="1" id="plugin0" style=";z-index:1000;" type="application/x-dgnria" width="1"><param name="tabId" value="{8E700FA2-4388-4E4C-96AC-DAB502FC76CF}" /></object>
    Tuesday, August 26, 2014 10:02 AM

Answers

  • Hi, 

    You could make this a standard attribute for your threat models by extending the threat knowledge base.  See Appendix II of the User Guide at Microsoft's Security Development Lifecycle Developer Starter Kit webpage - click on Threat Modeling Tool 2014 Principles (.zip) in the Design Phase row.

    Regards,

    Michael

    • Marked as answer by Pets0undz Tuesday, September 23, 2014 9:03 AM
    Tuesday, September 9, 2014 4:45 PM