312-96: Certified Application Security Engineer (Java)

By ECCouncil · Question Mode

QuestionQ16

VerifiedUnderstanding Application Security, Threats, and Attacks

Ted is an application security engineer who makes sure application-security activities are followed throughout the project lifecycle. One day, he analyzed various user interactions depicted in the use cases for a project in inception. Based on the use case at hand, he began depicting scenarios in which an attacker could misuse the application. Identify the activity Ted is performing.

Explanation

Abuse cases describe malicious or unintended interactions in which an attacker misuses an application. They are derived from normal use cases to identify threats and security requirements early in the lifecycle.

Community Discussion

No comments yet. Be the first to start the discussion!