Geun Hyeong Kim

Integrated Security Assessment of WebRTC Video Conferencing Systems: A Complementary Approach Using STRIDE and OWASP ZAP

Analyzing an integrated security assessment framework combining design-phase STRIDE threat modeling and runtime OWASP ZAP Baseline Scan for a WebRTC-based video conferencing architecture showed that STRIDE is useful for identifying logical risks, trust boundaries, and authorization relationships that are difficult to o...