CSSLP · Question #385
Which of the following are used in the development of abuse cases?
The correct answer is B. Use cases. Abuse cases, also known as misuse cases, are developed by analyzing existing use cases to identify potential malicious or unauthorized interactions with a system.
Question
Which of the following are used in the development of abuse cases?
Options
- ACase reports
- BUse cases
- CRisk results
- DComplaints
How the community answered
(37 responses)- A5% (2)
- B92% (34)
- C3% (1)
Why each option
Abuse cases, also known as misuse cases, are developed by analyzing existing use cases to identify potential malicious or unauthorized interactions with a system.
Case reports document specific incidents or issues, but they are not the primary input for creating proactive abuse scenarios during design.
Abuse cases are derived directly from use cases, which describe how a system is intended to be used by legitimate users. By examining use cases, security analysts can identify how actors might intentionally or unintentionally misuse the system, leading to the creation of abuse cases.
Risk results are outcomes of risk assessments, which might inform the prioritization of abuse cases but are not the fundamental input for their development.
Complaints are user feedback about issues, which are reactive and not the structured input for defining potential misuse scenarios.
Concept tested: Abuse case development
Topics
Community Discussion
No community discussion yet for this question.