A SYSTEMATIC APPROACH TO IDENTIFY SECURITY THREATS AND SPECIFY SECURITY REQUIREMENTS IN CONVERGED WEB-MOBILE APPLICATIONS

摘要

The convergence of web and mobile applications has created a number of security concerns due to the fact that user mobility has become increasingly supported by smart phones and Personal Digital Assistants (PDAs) [1]. New security challenges imposed by these technological advancements can be identified through a number of existing alternatives basing on different parameters. Application security challenges can be identified by either focusing on resources and goals as assets of an organization [2], use of graphical approach such as Unified Modeling Language [3], or use of models such as STRIDE [4]. For the purposes of this paper, the STRIDE threat model will be used to identify possible security threats for the anticipated Livestock Data Center (LDC) system. The STRIDE threat model is used due to its high potential of identifying security threats with a focus on attacker goals.