A 2 3 Cornucopia Cornucopia Cornucopia Cornucopia You have invented a new attack (no card) Lee can bypass application Andrew can access source code, of any type controls because dangerous/risky or decompile, or otherwise access programming language functions business logic to understand how have been used instead of safer the application works and any alternatives, or there are type secrets contained conversion errors, or because the application is unreliable when an external resource is unavailable, or there are race conditions, or there are resource initialization or allocation issues, or overflows can occur Read more application security in OWASP’s free Guides on Requirements, Development, Code Review and Testing, the Cheat Sheet series, and the Open Software Assurance Maturity Model 4 5 6 7 Cornucopia Cornucopia Cornucopia Cornucopia Keith can perform an action and Larry can influence the trust can bypass controls because Mwengu's actions cannot be it is not possible to attribute it to other parties including users have error/exception handling is investigated because there is not him in the application, or abuse that missing, or is implemented an adequate accurately trust elsewhere (e.g. in another inconsistently or partially, or does record of security application) not deny access by default (i.e. events, or there is not a full audit errors should terminate trail, or these can be altered or access/execution), or relies on deleted by Mwengu, or there is handling by some other service no centralized logging service or system
Cornucopia A Cornucopia Cornucopia 2 Cornucopia 3 You have invented a new attack of any type (no card) Lee can bypass application controls because dangerous/risky programming language functions have been used instead of safer alternatives, or there are type conversion errors, or because the application is unreliable when an external resource is unavailable, or there are race conditions, or there are resource initialization or allocation issues, or overflows can occur Andrew can access source code, or decompile, or otherwise access business logic to understand how the application works and any secrets contained Read more application security in OWASP’s free Guides on Requirements, Development, Code Review and Testing, the Cheat Sheet series, and the Open Software Assurance Maturity Model Cornucopia 4 Cornucopia 5 Cornucopia 6 Cornucopia 7 Keith can perform an action and it is not possible to attribute it to him Larry can influence the trust other parties including users have in the application, or abuse that trust elsewhere (e.g. in another application) can bypass controls because error/exception handling is missing, or is implemented inconsistently or partially, or does not deny access by default (i.e. errors should terminate access/execution), or relies on handling by some other service or system Mwengu's actions cannot be investigated because there is not an adequate accurately record of security events, or there is not a full audit trail, or these can be altered or deleted by Mwengu, or there is no centralized logging service
OWASP-Cornucopia-Ecommerce_Website.docx