practitionerSecure Development
Account for real user behavior in threat models
Said by Mehran Koushkebaghi ·
“The assumption that user will adapt to use the system in a way that it is designed for, is often not true.”
Transcript evidence from Mehran Koushkebaghi -- Security as a Systemic Concern: How to develop Anti-Requirements.