File tree Expand file tree Collapse file tree
04-design/01-threat-modeling
04-design/01-threat-modeling Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -50,3 +50,8 @@ www.opencre.org
5050# don't irritate the US government
5151nvd.nist.gov/
5252
53+ # SKF has a habit of not renewing its SSL cert
54+ www.securityknowledgeframework.org
55+
56+ # Slack tends to block bots, but not always
57+ owasp.slack.com
Original file line number Diff line number Diff line change @@ -273,6 +273,6 @@ then [submit an issue][issue040107] or [edit on GitHub][edit040107].
273273[ tmmanifesto ] : https://www.threatmodelingmanifesto.org/
274274[ tmcommunity ] : https://owasp.org/www-community/Threat_Modeling
275275[ tmprocess ] : https://owasp.org/www-community/Threat_Modeling_Process
276- [ TMdesigning ] : https://shostack.org/books/threat-modeling-book
276+ [ TMdesigning ] : https://shostack.org/books/threat-modeling-book-2nd-edition
277277[ TMpractical ] : https://threatmodeling.dev/
278278[ TMT ] : https://learn.microsoft.com/en-us/azure/security/develop/threat-modeling-tool
Original file line number Diff line number Diff line change @@ -76,4 +76,4 @@ then [submit an issue][issue050304] or [edit on GitHub][edit050304].
7676[ json-sanitizer ] : https://github.com/OWASP/json-sanitizer/releases/latest/
7777[ json-sanitizer-dependents ] : https://central.sonatype.com/artifact/com.mikesamuel/json-sanitizer/dependents
7878[ json-sanitizer-usage ] : https://github.com/OWASP/json-sanitizer/blob/master/docs/getting_started.md
79- [ rfc4627 ] : https://www.ietf .org/rfc/rfc4627.txt
79+ [ rfc4627 ] : https://www.rfc-editor .org/rfc/rfc4627.txt
Original file line number Diff line number Diff line change @@ -15,12 +15,12 @@ The MASWE is split out into weakness categories that correspond to the [MASVS][m
1515
1616* [ MASVS-STORAGE] ( https://mas.owasp.org/MASWE/MASVS-STORAGE/MASWE-0001/ ) sensitive data storage
1717* [ MASVS-CRYPTO] ( https://mas.owasp.org/MASWE/MASVS-CRYPTO/MASWE-0009/ ) cryptography best practices
18- * [ MASVS-AUTH] ( https://mas.owasp.org/MASWE/MASVS-AUTH/MASWE-0028 / ) authentication and authorization mechanisms
19- * [ MASVS-NETWORK] ( https://mas.owasp.org/MASWE/MASVS-NETWORK/MASWE-0047 / ) network communications
20- * [ MASVS-PLATFORM] ( https://mas.owasp.org/MASWE/MASVS-PLATFORM/MASWE-0053 / ) interactions with the mobile platform
21- * [ MASVS-CODE] ( https://mas.owasp.org/MASWE/MASVS-CODE/MASWE-0075 / ) platform and third-party software
22- * [ MASVS-RESILIENCE] ( https://mas.owasp.org/MASWE/MASVS-RESILIENCE/MASWE-0089 / ) integrity and running on a trusted platform
23- * [ MASVS-PRIVACY] ( https://mas.owasp.org/MASWE/MASVS-PRIVACY/MASWE-0108 / ) privacy of users, data and resources
18+ * [ MASVS-AUTH] ( https://mas.owasp.org/MASWE/MASVS-AUTH/MASWE-0018 / ) authentication and authorization mechanisms
19+ * [ MASVS-NETWORK] ( https://mas.owasp.org/MASWE/MASVS-NETWORK/MASWE-0026 / ) network communications
20+ * [ MASVS-PLATFORM] ( https://mas.owasp.org/MASWE/MASVS-PLATFORM/MASWE-0029 / ) interactions with the mobile platform
21+ * [ MASVS-CODE] ( https://mas.owasp.org/MASWE/MASVS-CODE/MASWE-0041 / ) platform and third-party software
22+ * [ MASVS-RESILIENCE] ( https://mas.owasp.org/MASWE/MASVS-RESILIENCE/MASWE-0051 / ) integrity and running on a trusted platform
23+ * [ MASVS-PRIVACY] ( https://mas.owasp.org/MASWE/MASVS-PRIVACY/MASWE-0066 / ) privacy of users, data and resources
2424
2525#### Why use it?
2626
Original file line number Diff line number Diff line change @@ -292,6 +292,6 @@ La Guía del Desarrollador de OWASP es un esfuerzo comunitario; si hay algo que
292292[ tmmanifesto ] : https://www.threatmodelingmanifesto.org/
293293[ TM ] : https://owasp.org/www-community/Threat_Modeling
294294[ TMP ] : https://owasp.org/www-community/Threat_Modeling_Process
295- [ TMdesigning ] : https://shostack.org/books/threat-modeling-book
295+ [ TMdesigning ] : https://shostack.org/books/threat-modeling-book-2nd-edition
296296[ TMpractical ] : https://threatmodeling.dev/
297297[ TMT ] : https://learn.microsoft.com/en-us/azure/security/develop/threat-modeling-tool
Original file line number Diff line number Diff line change @@ -15,13 +15,13 @@ El MASWE se divide en categorías de debilidades que corresponden a las categor
1515
1616* [ MASVS-STORAGE] ( https://mas.owasp.org/MASWE/MASVS-STORAGE/MASWE-0001/ ) almacenamiento de datos sensibles
1717* [ MASVS-CRYPTO] ( https://mas.owasp.org/MASWE/MASVS-CRYPTO/MASWE-0009/ ) mejores prácticas de criptografía
18- * [ MASVS-AUTH] ( https://mas.owasp.org/MASWE/MASVS-AUTH/MASWE-0028 / ) mecanismos de autenticación y autorización
19- * [ MASVS-NETWORK] ( https://mas.owasp.org/MASWE/MASVS-NETWORK/MASWE-0047 / ) comunicaciones de red
20- * [ MASVS-PLATFORM] ( https://mas.owasp.org/MASWE/MASVS-PLATFORM/MASWE-0053 / ) interacciones con la plataforma móvil
21- * [ MASVS-CODE] ( https://mas.owasp.org/MASWE/MASVS-CODE/MASWE-0075 / ) plataforma y software de terceros
22- * [ MASVS-RESILIENCE] ( https://mas.owasp.org/MASWE/MASVS-RESILIENCE/MASWE-0089 / ) integridad
18+ * [ MASVS-AUTH] ( https://mas.owasp.org/MASWE/MASVS-AUTH/MASWE-0018 / ) mecanismos de autenticación y autorización
19+ * [ MASVS-NETWORK] ( https://mas.owasp.org/MASWE/MASVS-NETWORK/MASWE-0026 / ) comunicaciones de red
20+ * [ MASVS-PLATFORM] ( https://mas.owasp.org/MASWE/MASVS-PLATFORM/MASWE-0029 / ) interacciones con la plataforma móvil
21+ * [ MASVS-CODE] ( https://mas.owasp.org/MASWE/MASVS-CODE/MASWE-0041 / ) plataforma y software de terceros
22+ * [ MASVS-RESILIENCE] ( https://mas.owasp.org/MASWE/MASVS-RESILIENCE/MASWE-0051 / ) integridad
2323 y ejecución en una plataforma confiable
24- * [ MASVS-PRIVACY] ( https://mas.owasp.org/MASWE/MASVS-PRIVACY/MASWE-0108 / ) privacidad de usuarios, datos y recursos
24+ * [ MASVS-PRIVACY] ( https://mas.owasp.org/MASWE/MASVS-PRIVACY/MASWE-0066 / ) privacidad de usuarios, datos y recursos
2525
2626#### ¿Por qué usarlo?
2727
You can’t perform that action at this time.
0 commit comments