DISCUSSION: We need to pick three use cases for threat modelling #9
Description
The Use Case and Threat Models subgroup met on Tuesday 16th September 5pm UK time and discussed selecting 3 use cases to threat model and contribute to the OWASP Threat Model Library.
The business level uses cases discussed and preferred by the attendees were:
- chatbot
- code generator
- clinical support/advice/aid
For the latter, the group did not come to a conclusion on what sort of "clinical" AI functionality/capability and that will be added to this thread when it happens.
The purpose of this thread is to allow discussion on the topics above and to make decisions on the focus area of the threat model for the business use case. As covered on the call, the process we wish to follow is:
- Select business use cases
- Within the business use case, focus on a system layer/component/area of functionality
- Confirm lifecycle phase(s) to be covered
This is shown in the diagram below:
Please add your thoughts & comments to this thread. This thread will be discussed and used to finalise decisions in the next subgroup call, on Tuesday 23rd September 5pm UK time.
Thanks!