diff --git a/Exercise/Writeup/lab01.md b/Exercise/Writeup/lab01.md index c0d3189..10a63e7 100644 --- a/Exercise/Writeup/lab01.md +++ b/Exercise/Writeup/lab01.md @@ -23,4 +23,23 @@ User | Add and remove friends | Keep track of what my friends are up to User | Set home privacy | Prevent strangers from entering my home User | Use voice chat | Communicate with other users User | Fast travel | Quickly get to another location in the virtual space -User | Give another user an item | Sell/Gift assets \ No newline at end of file +User | Give another user an item | Sell/Gift assets + +## Assets +- User identity +- User belongings +- Friends lists +- Public image of system +- Voice data + +### Harm analysis +Action | Asset | Harm +-- | -- | -- +Steal user credentials | User identity | User information compromised, belongings stolen +Accept unwanted friend request | Friends lists | User information partially compromised, trust acquired +Unmute user microphone without consent | Voice data | User privacy compromised + +### *'Achieve'* goals +- Always use multi-factor authentication for users +- +