TUHH/secure-software-engineering
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Added writeup for lab 1 (first session)

Browse Source
This commit is contained in:
Michael Chen 2022-05-02 17:53:26 +02:00
parent 2514044246
commit 3eafadbae3
No known key found for this signature in database
GPG Key ID: 1CBC7AA5671437BB
1 changed files with 21 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
Exercise/Writeup/lab01.md Normal file
View File

@ -0,0 +1,21 @@
# Lab 1: Security Requirements
## Metaverse User Stories
`Metaverse Users` are referred to as users here.
User | Task | Goal | Context | Action | Outcomes
-- | -- | -- | -- | -- | --
User | perform authorized payment transactions | only I can make transactions in my name | An adversary knows my payment information | he tries to pay with my info | the payment is declined if not authorized by me
Developer | access user configurations (avatars, config) | personalize the user experience of my applications
Teacher | make physical course material available in the metaverse | students can see them in virtual reality
User | have a unique identification key in bound to my avatar | everyone can recognize my avatar | my avatar is public | my avatar is used by another user | the user cannot impersonate my identity because he doesn't know the key
User | virtual home to be self or zero knowledge hosted | my privacy can not be intruded
Corrections:
- User stories are more non-functional and should not contain less security aspects, rather the use-case functionality
User | Task | Goal
-- | -- | --
User | perform a payment | i can acquire an virtual/physical asset