8 9 10 J Cryptography Cryptography Cryptography Cryptography Eoin can access stored business Andy can bypass random number Susanna can the Justin can read credentials for data (e.g. passwords, session generation, random GUID cryptography in use because it is accessing internal or external identifiers, PII, cardholder data) generation, hashing and not strong enough for the degree resources, services and others because it is not securely encryption functions because of protection required, or it is not systems because they are stored encrypted or securely hashed they have been self-built and/or strong enough for the amount of in an unencrypted format, or are weak effort the attacker is willing to saved in the source code make Q K Cryptography Cryptography Randolph can access or predict Dan can influence or alter (no card) (no card) the master cryptographic secrets cryptography code/routines (encryption, hashing, digital signatures, random number and GUID generation) and can therefore bypass them
Cryptography 8 Cryptography 9 Cryptography 10 Cryptography J Eoin can access stored business data (e.g. passwords, session identifiers, PII, cardholder data) because it is not securely encrypted or securely hashed Andy can bypass random number generation, random GUID generation, hashing and encryption functions because they have been self-built and/or are weak Susanna can the cryptography in use because it is not strong enough for the degree of protection required, or it is not strong enough for the amount of effort the attacker is willing to make Justin can read credentials for accessing internal or external resources, services and others systems because they are stored in an unencrypted format, or saved in the source code Cryptography Q Cryptography K Randolph can access or predict the master cryptographic secrets Dan can influence or alter cryptography code/routines (encryption, hashing, digital signatures, random number and GUID generation) and can therefore bypass them (no card) (no card)
OWASP-Cornucopia-Ecommerce_Website.docx