威胁建模技术在Web应用程序中的应用

The Application of the Thread Modeling Technology in Web Application

本文讨论了威胁建模技术在Web应用程序中的应用，对威胁建模这一新技术的主要特点，方法进行了详细介绍，给出了几乎适合所有web应用程序的建模步骤，并以“湖北省锅炉压力容器检验研究所自动化办系统”为例进行了详细讨论，最后根据威胁建模公式时系统进行威胁评估。

The paper discussed the threat modeling technology applied to Web application,introduced the method and trait of the threat modeling technology detailly,and presented the modeling step which nearly adapt to all Web application, and take the ＂Automatization Office System of Hubei Boiler Pressure Vessel Testing Study Institute＂ project for example to discuss this new technology,in the end, make a threat evaluating for this project based on threat modeling formula.