Demo: reviewing the redesigned order subsystem
On This Lesson 3 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
run a design review end to end on the running case; prepares SRC-018-LAB1.
Draft outline details
Step by step
- Draw the redesigned data flow with trust boundaries: gateway, orders, payments adapter, Kafka, database, admin tool.
- Walk each flow with STRIDE prompts and record threats.
- Build the authorization matrix and test cross-customer access on internal endpoints.
- Planned mistake: review only the public API. Fix: include internal calls, consumers, and the admin tool, where a missing check is found.
- Rate each finding, assign owners and dates, and mark one accepted risk with an expiry.
- Write the summary and agree actions with the role-played security lead.
Check your understanding
Where was the missing check found?
Show answer
On a path other than the public API, such as an internal or admin path.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.