Summary

If you have never performed a threat analysis on your application, you should consider doing so, particularly if your application is exposed in a network or Internet environment. Cost shouldn’t be an issue, because the cost of performing the analysis—the initial brainstorming phase anyway—is relatively cheap in terms of money and time. Performing a threat analysis gives you an opportunity to meet with other members of your team (possibly in a way you’ve never done before) and discuss possible threats related to your application. Meet for at least an hour, and see how it goes. With the right people in the room, you might be surprised at what you find and how many scenarios you can cover in an hour.

Whether you have performed a threat analysis ...

Get Security for Microsoft® Visual Basic® .NET now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.