From ecc555f4f4f493880894cf1dd8e1aad27361fdaf Mon Sep 17 00:00:00 2001 From: Michael Chen Date: Tue, 3 May 2022 11:04:01 +0200 Subject: [PATCH] =?UTF-8?q?Added=20session=202=20writeup=20for=20lab=201?= =?UTF-8?q?=20(collaborative=20with=20M=C3=A1rk)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- Exercise/Writeup/MisuseCase.svg | 1 + Exercise/Writeup/lab01.md | 19 ++++++++++++++++++- 2 files changed, 19 insertions(+), 1 deletion(-) create mode 100644 Exercise/Writeup/MisuseCase.svg diff --git a/Exercise/Writeup/MisuseCase.svg b/Exercise/Writeup/MisuseCase.svg new file mode 100644 index 0000000..1124ce6 --- /dev/null +++ b/Exercise/Writeup/MisuseCase.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/Exercise/Writeup/lab01.md b/Exercise/Writeup/lab01.md index 10a63e7..2af0aa4 100644 --- a/Exercise/Writeup/lab01.md +++ b/Exercise/Writeup/lab01.md @@ -25,6 +25,13 @@ User | Use voice chat | Communicate with other users User | Fast travel | Quickly get to another location in the virtual space User | Give another user an item | Sell/Gift assets +> As a 'Metaverse user', +> I want to add/remove friends (from/to my virtual friend list) +> So I can keep track of their activites + +**Integrity** => Befriending strangers => disclosing personal information to strangers (HARM) +**ACTION** => Unauthorized access (edit) to FList + ## Assets - User identity - User belongings @@ -33,6 +40,12 @@ User | Give another user an item | Sell/Gift assets - Voice data ### Harm analysis + +> "What **HARM** could come to [asset] from an [action] violating a [concern]?" +> assets from User Stories +> actions yield Avoid goals +> concerns from CIA+ principles + Action | Asset | Harm -- | -- | -- Steal user credentials | User identity | User information compromised, belongings stolen @@ -41,5 +54,9 @@ Unmute user microphone without consent | Voice data | User privacy compromise ### *'Achieve'* goals - Always use multi-factor authentication for users -- +## Use Cases + +Produced using [Lucidchart](https://lucid.app/lucidchart/daccac87-861b-46f9-a0f1-5d13ae90bc02/edit?invitationId=inv_6aea8472-a917-4a59-ad01-afd8f3ca40e5). + +![Use Case / Misuse Case diagram](MisuseCase.svg)