Application Security Design Antipatterns
An antipattern is a commonly-used solution that has more bad consequence than good ones.
Antipatterns
- Excessive trust
- Unlimited blast radius
- Insecure by default
- Security by obscurity
- Uncontrolled access
- Incidental complexity
- Reinventing the wheel
What are the dangers of implicit use of antipatterns?
- Vulnerability susceptibility
- Difficult to Retrofit
Strategies for working with antipatterns
- Developer awareness
- Questions during a threat modeling session