- A non-technical manager whose only experience with the concept of SQL Injection is the xkcd Exploits of a Mom cartoon from above, thinks validation and sanitization are the same thing, says this vocally during meetings, and is beginning to confuse the other development team members. Correct the manager in an appropriate manner. Your post should be in the form of a dialog with the manager.
The discussion questions will be based on the Harold’s Barbed Wire Widgets scenario below.
Please Read:
Betty and Harold are a retired couple in their 70s. Betty has two math degrees and worked with Christine Darden and other women featured in the Hidden Figures book as human computers at NASA and then taught computer science classes at the local college. Harold was in the United States Air Force in Vietnam (he flew B-57s) and then worked for IBM. Harold discovered that his great-grandfather was a cowboy in Texas in the late 19th century who was put out of work by barbed wire. Harold, as his retirement hobby, makes peace with that past by constructing art out of barbed wire and selling it at craft shows as “Harold’s Barbed Wire Widgets.” His customers begged him to start selling his art online and so he and Betty set up a web server in the basement and opened a basic online storefront. They are both good with computers but want to make sure they’ve thought of everything and whether they could do things better. They’ve asked your cybersecurity consulting team to do threat modeling for their business.
Choose one of the topics below to discuss:
- How would you proceed to assist Betty and Harold? What process would you take them through? What questions do you need to ask them? If brainstorming is part of your process, what tools would you use? Write up your plan as an appropriate memo for Betty and Harold.
- Using the University of Washington Security Cards game (See Read Watch) pick five (5) cards and respond to them for Betty and Harold’s business. You can use images of the cards or copy their text, but make sure the class knows which five cards you chose. Also include why those five cards were selected.
