为解决系统潜在的风险和漏洞,提出了一种基于STRIDE威胁模型建立的安全威胁模型对网站群管理平台面临的威胁进行分析的方法。运用此威胁模型对网站群管理平台的数据流进行威胁分析,同时有针对性地提出各种类型威胁的解决方法,该威胁分析方法不但可以用于现有各种系统,也可以用于新系统开发阶段。
In order to solve the potential risks and vulnerabilities of the system, a method based on STRIDE threat model was proposed to analyze the threats faced by website group management platform. Threat model was used to analyze the data flow of website management platform, and to present various kinds of threat solutions. This method not only can be used in the different existing systems, but also can be used when new systems are developed.