Clerkendweller: /* Indicative Diagram */

2018-02-16T15:15:15Z

‎Indicative Diagram

Clerkendweller: New page

2018-02-16T11:41:24Z

New page

New page

__NOTOC__

This is an automated threat. To view all automated threats, please see the [[:Category:Automated Threat|Automated Threat Category]] page. The OWASP Automated Threat Handbook - Wed Applications ([https://www.owasp.org/index.php/File:Automated-threat-handbook.pdf pdf], print), an output of the [[OWASP Automated Threats to Web Applications|OWASP Automated Threats to Web Applications Project]], provides a fuller guide to each threat, detection methods and countermeasures. The [https://www.owasp.org/index.php/File:Oat-ontology-decision-chart.pdf threat identification chart] helps to correctly identify the automated threat.

== Definition ==

===OWASP Automated Threat (OAT) Identity Number ===

OAT-020

===Threat Event Name===

Account Aggregation

=== Summary Defining Characteristics===

Use by an intermediary application that collects together multiple accounts and interacts on their behalf.

===Indicative Diagram===

=== Description ===

Compilation of credentials and information from multiple application accounts into another system. This aggregation application may be used by a single user to merge information from multiple applications, or alternatively to merge information of many users of a single application. Commonly used for aggregating social media accounts, email accounts and financial accounts in order to obtain a consolidated overview, to provide integrated reporting and analysis, and to simplify usage and consumption by the user and/or their professional advisors. May include making changes to account properties and interacting with the aggregated application's functionality.

For other forms of data harvesting, including the distribution of content, see [[OAT-011 Scraping]]. For hastening progress, see [[OAT-006 Expediting]] instead.

=== Other Names and Examples ===

Aggregator; Brokering; Client aggregator; Cloud services brokerage; Data aggregation; Financial account aggregator; Intermediarisation; Intermediation

=== See Also ===

* [[OAT-006 Expediting]]
* [[OAT-011 Scraping]]
* [[OAT-019 Account Creation]]

== Cross-References ==

=== CAPEC Category / Attack Pattern IDs ===

* 167 Lifting Sensitive Data from the Client
* 210 Abuse of Functionality

=== CWE Base / Class / Variant IDs ===

* 799 Improper Control of Interaction Frequency

=== WASC Threat IDs ===

* 21 Insufficient Anti-Automation
* 42 Abuse of Functionality

=== OWASP Attack Category / Attack IDs ===

* [[:Category:Abuse of Functionality|Abuse of Functionality]]

[[Category: Automated Threat]]

@@ Line 19: / Line 19: @@
 ===Indicative Diagram===
+[[File:OAT-020_Account_Aggregation.png|500px|link=]]
 === Description ===

OAT-020 Account Aggregation - Revision history

Clerkendweller: /* Indicative Diagram */

Clerkendweller: New page