Resilience (RSK)

Resilience
К

Шеріф може вимкнути або обійти перевірки захисту від зворотного проектування (anti-reversing) та захисту під час виконання (runtime protection), модифікувавши їх або перехопивши сигнали, на яких вони ґрунтуються, що дає змогу непомітно продовжити аналіз або інструментування (instrumentation)

How to play?

Scenario: Sherif can disable or evade anti-reversing and runtime-protection checks by patching these or hooking the signals they rely on, allowing analysis or instrumentation to continue undetected

Example

Threat Modeling

STRIDE

What can go wrong?

What are we going to do about it?

Mappings

STRIDE: -

MASTG: 0341,0354

MASTG Best: 0041,0048

MASTG Know: 0030,0032,0087,0109,0110,0119,0118

MASWE: 0058

CAPEC™: 167,554

SAFECode™: -

MASVS: MASVS-RESILIENCE-2

No attacks registered!

OWASP Cornucopia

OWASP Cornucopia is a mechanism in the form of a card game to assist software development teams identify security requirements in Agile, conventional and formal development processes. It is language, platform and technology-agnostic, and is free to use. OWASP Cornucopia is licensed under the Creative Commons Attribution-ShareAlike 4.0 license, so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar licence to this one.

© 2012-2025 OWASP Foundation. The Open Worldwide Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software.