diff --git a/Exercise/Writeup/MisuseCase.svg b/Exercise/Writeup/MisuseCase.svg new file mode 100644 index 0000000..1124ce6 --- /dev/null +++ b/Exercise/Writeup/MisuseCase.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/Exercise/Writeup/lab01.md b/Exercise/Writeup/lab01.md index 10a63e7..2af0aa4 100644 --- a/Exercise/Writeup/lab01.md +++ b/Exercise/Writeup/lab01.md @@ -25,6 +25,13 @@ User | Use voice chat | Communicate with other users User | Fast travel | Quickly get to another location in the virtual space User | Give another user an item | Sell/Gift assets +> As a 'Metaverse user', +> I want to add/remove friends (from/to my virtual friend list) +> So I can keep track of their activites + +**Integrity** => Befriending strangers => disclosing personal information to strangers (HARM) +**ACTION** => Unauthorized access (edit) to FList + ## Assets - User identity - User belongings @@ -33,6 +40,12 @@ User | Give another user an item | Sell/Gift assets - Voice data ### Harm analysis + +> "What **HARM** could come to [asset] from an [action] violating a [concern]?" +> assets from User Stories +> actions yield Avoid goals +> concerns from CIA+ principles + Action | Asset | Harm -- | -- | -- Steal user credentials | User identity | User information compromised, belongings stolen @@ -41,5 +54,9 @@ Unmute user microphone without consent | Voice data | User privacy compromise ### *'Achieve'* goals - Always use multi-factor authentication for users -- +## Use Cases + +Produced using [Lucidchart](https://lucid.app/lucidchart/daccac87-861b-46f9-a0f1-5d13ae90bc02/edit?invitationId=inv_6aea8472-a917-4a59-ad01-afd8f3ca40e5). + +![Use Case / Misuse Case diagram](MisuseCase.svg)