AJR/TechradarDev
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix typos and change some grammatical constructions

Browse Source
This commit is contained in:
daniel.motzko
2021-07-02 11:09:35 +02:00
parent 8bfcbe8ae7
commit 74f3203a4e
79 changed files with 82 additions and 135 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
radar/2017-03-01/evil-user-stories.md
View File

@@ -2,8 +2,8 @@
title: "Evil User Stories"
ring: assess
quadrant: methods-and-patterns
---
With Evil User Stories, we aim to raise the project teams' (PO, Dev-Team, QA) and clients' awareness for security topics and introduce a security-by-design principle.
The first step is to identify business use cases of potential vulnerabilities in our software product. The next step is to write an Evil User Story for this use case, from the perspective of an evil persona, e.g. "John Badboy who wants to hack our software". The idea behind this is to take a look at specific parts (business logic) of the software from a perspective that would otherwise not be considered when working on standard user stories.