Security/Threat Analysis/process
< Security | Threat Analysis
Contents
OpenStack Threat Modelling Process
Initiation
At the beginning a new 'Threat Manager' ( one responsible for overall management of the work) for each OpenStack project is selected.
Decomposition Into Component
'Threat Manager' performs initial analysis about the target project, do component break down of the project, gather information about the developers / reviewers relevant to that component. In this phase, 'Threat Manager' communicates the ongoing activity to the target project's core developers.
Draft threat Report For each component
'Threat Manager' or an assigned security analyst together with a relevant core developer/s of a project analyses each component ( DFD, Security assumptions, assest identification) and identify possible threats / security weakness in the target component.
