Add harm analysis section

This commit is contained in:
Márk Varga 2022-05-02 22:13:51 +02:00
parent b01f04d938
commit ff46ca5eeb

View File

@ -24,3 +24,22 @@ User | Set home privacy | Prevent strangers from entering my home
User | Use voice chat | Communicate with other users User | Use voice chat | Communicate with other users
User | Fast travel | Quickly get to another location in the virtual space User | Fast travel | Quickly get to another location in the virtual space
User | Give another user an item | Sell/Gift assets User | Give another user an item | Sell/Gift assets
## Assets
- User identity
- User belongings
- Friends lists
- Public image of system
- Voice data
### Harm analysis
Action | Asset | Harm
-- | -- | --
Steal user credentials | User identity | User information compromised, belongings stolen
Accept unwanted friend request | Friends lists | User information partially compromised, trust acquired
Unmute user microphone without consent | Voice data | User privacy compromised
### *'Achieve'* goals
- Always use multi-factor authentication for users
-