While working on patterns & practices Security guidance, I pushed the idea of “Visual Threats and Countermeasures.”
I wanted a simple way to show customers how to quickly whiteboard their application and find issues.
It was very effective for finding hot spots and drilling in.
Here is an example:
Scenario
Threats / Attacks
Vulnerabilities
Database Server Threats / Attacks and Vulnerabilities
Library Threats / Attacks and Vulnerabilities
Web Application Threats / Attacks and Vulnerabilities
Web Server Threats / Attacks and Vulnerabilities
