Application threat modeling

摘要

A method and system for analyzing data relating to a website including the content and architecture of the website are provided. All relevant site related information is cataloged. Then "attack points" or vectors used by a hacker within the site are determined. Based on the above, a calculation of a relevant level of security for each attack point is determined.