Project OVVL – Threat Modeling Support for the entire secure development lifecycle

Autor: Schaad, Andreas
Jazyk: angličtina
Rok vydání: 2020
Předmět:
DOI: 10.18420/sicherheit2020_10
Popis: OVVL (the Open Weakness and Vulnerability Modeller) is a tool and methodology to support threat modeling in the early stages of the secure software development lifecycle. We provide an overview of OVVL (https://ovvl.org), its data model and browser-based UI. We equally provide a discussion of initial experiments on how identified threats in the design phase can be aligned with later activities in the software lifecycle (issue management and security testing).
Databáze: OpenAIRE