# Designing Applications for Security and Resilience

Design phases recommended (risk/hazard -> requirements).

* Misuse case modeling.
* Security design and architecture review.
* Threat and risk modeling.
* Risk analysis and modeling.
* Security requirements and test case generation.

Design to meet nonfunctional requirements (worst case).

Design patterns (proven templates for solving issues).

Architecture for the web/cloud (particular attack surface).

Architecture and design review checklist.

<figure><img src="https://1055198255-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FuV5xU0WcBm5EwmO8bq5p%2Fuploads%2FEBQpWMKRq2x6DLt0wXvF%2F2023-09-16_12-57.png?alt=media&#x26;token=476f8171-a6c3-4d56-b70e-92f53d8c9a5f" alt=""><figcaption></figcaption></figure>
