Threat Modeling again. Drawing the diagram.

posted by  kevyn (54)  11 months ago (blogs.msdn.com)

In my last post, I listed off some of the elements that make up a threat model.  Now that we have a common vocabulary that can be used to describe the names and types of the elements, let's see what we can do with it.

For this series, I'm going to use an API that's near and dear to my heart: PlaySound.

The nice thing about PlaySound is that it's a relatively simple API, but it's complex enough that it can demonstrate many of the characteristics of threat modeling.

S