OWASP® Cornucopia Ecommerce Website Edition - Threat Modeling Cards

The Cyber Security Cornucopia: eCommerce Website Edition card deck is a gamified version of OWASPs Secure Coding Practices Quick Reference Guide. The objective is to help teams perform threat modelling on retail websites in the same way that Elevation of Privilege helps treat model applications in general.

The game features 80 tarot sized cards. Each card describes a common error or anti-pattern that allows systems to be vulnerable to attack. These vulnerabilities are chosen from data gathered by web security experts at OWASP. For more details about the game, click here.

Got Remote teams? Use Croupier to generate random hands for remote players and continue to play using physical cards.