New answers tagged

0

I would highly recommend Microsofts approach with the Threat Modeling Tool (https://www.microsoft.com/en-us/download/details.aspx?id=49168) it comes with some instructions and guidelines. Also consider playing some elevation of privilege (https://www.microsoft.com/en-us/SDL/adopt/eop.aspx) that gives some good insights into threat modeling. To get/make an ...


2

Many NMS systems work better when deployed using simple network management protocol (SNMP). SNMP allows for greater detail in data versus inference. E.g. without SNMP, the NMS tool relies on aggregating bandwidth and connections it sees, versus using SNMP where it can access the router and query an interface. So what is at risk here: Routes: In segregated ...


1

If someone compromises the proxy, they can attack your web app. If they're on the same machine (inside all the same boundaries) then this matters less, not more. But the proxy is probably more exposed to attack.


-1

The solution for you does exists I presume - use an onboard memory, better take a look for SoC-integrated memory, btw. the crucial part for memory aquisition or even for cold boot is an ability to ACTUALLY eject a memory or be able to boot from a pendrive, for example. uBoot+NAND will save you, I suppose. Start looking from Cubieboard 1 or 2 as an example of ...


1

A potential attack vector you haven't covered so far is something called "acoustic cryptanalysis", although I don't know if this is relevant in your case. Some experts could actually determine a RSA key using the sound the CPU makes (which humans aren't able to hear). http://www.cs.tau.ac.il/~tromer/acoustic/ I haven't thought of a practical solution as of ...



Top 50 recent answers are included