thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Abuse Case

A description of how a user could intentionally misuse a system's functionality to cause harm, used to derive security requirements and tests.

Definition

Abuse cases invert use cases by modeling hostile intent, for example a customer manipulating a coupon field to apply unlimited discounts. They help developers think like an adversary during requirements and design. Each abuse case should lead to a mitigating requirement and a negative test.

Example

Abuse case: a user replays the 'apply referral bonus' request 500 times to inflate credit.

Exam tip

Abuse cases (intentional, malicious) are often contrasted with misuse cases; both drive negative testing.

Related terms