TVM

SDLC -> Trust Boundary
risk assessment -> Security Requirements -> Abuse Cases -> Threat Modeling -> Security Architecture (hardware or software) -> SSCR(static) -> Pentest (dynamic)
Security Testing for Agile/DevOps and DevSecOps
- Infrastructure as Code
- Continuous Integration and Continuous Delivery
- security activities are being automated as much as possible

Basic Tampering Techniques
- Binary Patching
- Code Injection
Static and Dynamic Binary Analysis
- Using Disassemblers and Decompilers
- Debugging and Tracing
Advanced Techniques
- Dynamic Binary Instrumentation
- Emulation-based Dynamic Analysis
- Custom Tooling with Reverse Engineering Frameworks