Platform & Code (PCQ)
Platform & Code
Q
Grant can modify or expose data by influencing or altering JavaScript bridges, DOM, extensions or interprocess communication (e.g. shared memory, message passing, pipes, sockets)
Scenario: Grant can modify or expose data by influencing or altering JavaScript bridges, DOM, extensions or interprocess communication (e.g. shared memory, message passing, pipes, sockets)
Example
Threat Modeling
STRIDE
What can go wrong?
What are we going to do about it?
Mappings
STRIDE: -
MASTG: 0332,0334,0339,0355,0356,0357,0376,0377,0379,0380,0381,0388,0389
MASTG Best: 0034,0011,0012,0013,0035,0039,0049,0058,0062,0061,0059,0063,0068,0069
MASTG Know: 0104,0076,0018,0117,0020,0139,0082,0141
MASWE: 0035,0034,0050,0018,0032,0001,0031
SAFECode™: -
MASVS: MASVS-PLATFORM-2,MASVS-CODE-4,MASVS-STORAGE-2,MASVS-AUTH-1,MASVS-PLATFORM-1,MASVS-STORAGE-1,MASVS-CRYPTO-2
No attacks registered!
