Network & Storage (NSX)
Network & Storage
10
Maarten can compromise the communication between the app and the external services because the app does not verify TLS certificates and -chains, trust insecure sources, lack hostname verification or ignore TLS verification issues
Scenario: Maarten can compromise the communication between the app and the external services because the app does not verify TLS certificates and -chains, trust insecure sources, lack hostname verification or ignore TLS verification issues
Example
Threat Modeling
STRIDE
What can go wrong?
What are we going to do about it?
Mappings
OWASP MASVS: NETWORK-1
OWASP MASTG: TEST-0019,TEST-0021,TEST-0065,TEST-0067
CAPEC: 57,94,156,465,466,479,701
SAFECode: 14,29,30
Attacks
No attacks registered!
