0x07-BusinessLogic.md

Business Logic Flaws

Background

Principles (if any)

Positive controls

Control

How to build a secure using Control to help you, including (or even just) UML diagrams. I prefer swim lanes, but as long as it prints in landscape mode, I'm cool. I don't want portrait diagrams as this is impossible to reflow automatically using our tools.

Control

How to build a secure using Control to help you

Secure processes

Fraud

Aggregate data disclosure

Unit or Integration Test Cases

Abuse Cases

Negative patterns

Control that should never ever appear under pain of infinite nyan cat

e.g. shared knowledge questions or answers, or dynamic SQL queries

References

---