openstack/security-doc
Code Issues Proposed changes

Replace Chinese quotes to English quotes

Browse Source 
Change-Id: I848d7b9cd1ab7423d488c480b5a8f8be233c8995
This commit is contained in:
melissaml 2018-02-15 00:49:43 +08:00
parent 246e1b8074
commit c6de4aff47
4 changed files with 4 additions and 4 deletions
case-studies
monitoring-logging-case-studies.rst
security-guide/source/dashboard
checklist.rst
security-threat-analysis/source
architecture-diagram-guidance.rstthreat-analysis-process.rst

2
case-studies/monitoring-logging-case-studies.rst

@ -23,7 +23,7 @@ to alerts coming from the new infrastructure. She uses a currently
existing Security Event and Incident Management (SEIM) solution, and existing Security Event and Incident Management (SEIM) solution, and
configures secure logging to the SEIM event collector. Alice and the SOC configures secure logging to the SEIM event collector. Alice and the SOC
analyst build the SEIM views so that logs are correlated by type, and analyst build the SEIM views so that logs are correlated by type, and
trigger alerts on unexpected or “interesting” events, such as a trigger alerts on unexpected or "interesting" events, such as a
successful login by a user immediately after a string of failed login successful login by a user immediately after a string of failed login
attempts within a given timeframe. The SOC analyst is also given attempts within a given timeframe. The SOC analyst is also given
escalation protocols and contact information so that when an specific escalation protocols and contact information so that when an specific

2
security-guide/source/dashboard/checklist.rst

@ -127,7 +127,7 @@ Recommended in: :doc:`cookies`.
Check-Dashboard-06: Is ``SESSION_COOKIE_HTTPONLY`` parameter set to ``True``? Check-Dashboard-06: Is ``SESSION_COOKIE_HTTPONLY`` parameter set to ``True``?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
The “HTTPONLY” cookie attribute instructs web browsers not to allow scripts The "HTTPONLY" cookie attribute instructs web browsers not to allow scripts
(e.g. JavaScript or VBscript) an ability to access the cookies via the DOM (e.g. JavaScript or VBscript) an ability to access the cookies via the DOM
``document.cookie`` object. This session ID protection is mandatory to prevent ``document.cookie`` object. This session ID protection is mandatory to prevent
session ID stealing through XSS attacks. session ID stealing through XSS attacks.

2
security-threat-analysis/source/architecture-diagram-guidance.rst

@ -50,7 +50,7 @@ Service Architecture diagrams contain these elements:
types types
- A vertical cylinder indicates storage or a database - A vertical cylinder indicates storage or a database
- A horizontal cylinder (a “pipe” shape) indicates a message - A horizontal cylinder (a "pipe" shape) indicates a message
queue (use an elongated rectangle if horizontal cylinders are queue (use an elongated rectangle if horizontal cylinders are
unavailable) unavailable)

2
security-threat-analysis/source/threat-analysis-process.rst

@ -54,7 +54,7 @@ Before the review
Running the threat analysis review Running the threat analysis review
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Identify the “scribe” role, who will record the discussion and any - Identify the "scribe" role, who will record the discussion and any
findings in the etherpad. findings in the etherpad.
- Ask the project architect to briefly describe the purpose of the service, - Ask the project architect to briefly describe the purpose of the service,
typical uses cases, who will use it and how it will be deployed. typical uses cases, who will use it and how it will be deployed.