STRIDE is a popular threat modeling technique commonly used to discover the security weaknesses of a software system.

For this assignment 

(a) research and discuss the limitations associated with STRIDE

(b) Create your own attack tree using the example in Chapter 4 “Example Attack Tree” p95 as a reference point

(c) research and discuss the limitations associated with attack trees and attack libraries. 

Explain in detail how you would start a threat modeling project. Please provide explanations for each step stated.

The goal of this course is for you to leave with a thorough understanding of both the philosophy and a solid foundation of methodology for Human-Centered Design. As such, you have had to learn on the go and iterate on team work as part of a constructivist learning approach. This has been a significant success for many individuals, and some of the team work has seen a marked improvement. However, many have still yet to evidence a solid understanding of the HCD approach. I would like to give you the opportunity to do so.

Thus the final individual assignment has been shifted to an OPTIONAL extra credit activity worth up to 15% added to your final grade. 

This final assignment is a full HCD Report from Mandate to Final Brief. 

• All of your human data can be fabricated (though do not take extreme liberties here)
• You do not have monetary restrictions
• All work proofs must be hand-drawn with the exception of prototypes. 

The mandate for this “project” is: 

     – Design a technology to improve community-building in college dormitory life. 

Sections of this report must include:

• Project Overview
  • Mandate, Description, Ideal Team Composition
• Projected Timeline and Milestones List
• Problem Identification Phase
  • Competitive Landscape Statement
  • User Research (Field sites/population, data collection, findings & interpretations)
  • Personas (3 Personas, must have at least 1 Primary and 1 Secondary)
  • Problem Statement
• Solution Generation Phase
  • Job Stories
  • 8-Ups
  • Storyboards
  • User-Focused Solution Statement
• Solution Design and Specifications
  • Full proposal statement
  • Prototype
• Conclusion 
  • Future directions and goals

BE EXPLICIT WITH YOUR LOGIC AND ANALYSIS. Evidence to me that your process is grounded in HCD. 

The issue of obscurity on the Internet isolates feelings. On the one side, there are numerous who keep up that obscurity on the World Wide Web is a basic element of its tendency, and of its freedom.2 On the contrary side are the individuals who view the Internet as the same as some other open discussion, where secrecy must be the exemption, not the run the show. This has created a social propensity for unknown discourse. While in the material world individuals have a tendency to recognize themselves when they go into relations with different people, on the Internet, this isn’t the boundless practice. Actually, one experiences the making of various advanced characters which parallel the ‘authority’ and identifiable one. 

This propensity towards obscurity isn’t confined to regular people. Substances are made on the Internet that gathering regular interests and utilize the huge capability of the Web to advance, reach, and bond. Business substances may likewise exploit the expanded murkiness conceded by the Internet. Puncturing the corporate cover on the Web might be amazingly mind-boggling, particularly when the main connection to the outside world is a financial balance, frequently opened in some expense asylum. This social perspective, particularly concerning people, can’t be disregarded and without enjoying the libertarian talk which will be inspected assist on, extraordinarily impacts the adequacy of any lawful mediation went for smothering or abridging mysterious discourse. In the meantime, one must consider what are the points of an intercession constraining secrecy on the Internet, what are the interests that require insurance, where to strike the harmony between contending esteems and what is the cost, monetary and social, of authorization.

Research, identify, and write a 2 page paper that describes a recent information security breach receiving public attention, and answers the following questions:

• What, if anything, would have prevented the security breach?
• In your opinion, what should the consequences be for individuals who commit information security breaches?
  • Support you opinion with specific examples.
• Why is the field of Information Security considered a �growth industry�?
• What are the costs associated with an information security breach?

Papers must meet the following criteria:

• Double spaced,
• Font size 12,
• Normal margins,
• 2 pages
• 3 sources