Questions tagged [threat-modeling]

The process of describing possible threats and analyzing their possible affect on target systems.

Filter by
Sorted by
Tagged with
0
votes
1answer
39 views

Are password managers the best way to achieve identity compartmentalization online?

I've been using a well-known password manager to create several identities for use on each web service I sign up to. I had the idea of creating 3+ email addresses with strong passwords consisting of ...
-1
votes
0answers
27 views

Modeling and managing attack surface around individual finance [closed]

I want to protect myself from fraud and identity theft. While there are on the Internet plenty of arbitrary collections of precautionary tips, I want to make rational, fully informed choices to ...
20
votes
7answers
2k views

Could you anonymously upload a file on the internet if the threat model was the entire world trying to find your identity after you do so? [closed]

Thought experiment: You need to upload a file, and the threat model is the entire world trying to find out who you are after you do so. I know this is absurd, but bear with me, it's a thought ...
0
votes
1answer
72 views

Malware Threat Hunting in Airport Systems - KPIs/Metrics to Track [closed]

I am trying to figure out how to detect potential threats from malwares in various systems installed in the airport. To be specific, my focus is on the following systems in airports: Baggage ...
1
vote
0answers
42 views

Threat modelling workshop materials focusing on threat actor profiles [closed]

A while back I went to a threat modelling workshop that had a card deck with various actors, their motivations, and their methods. I found this extremely helpful to frame the discussion around the ...
51
votes
5answers
5k views

Should the average user with no special access rights be worried about SMS-based 2FA being theoretically interceptable?

Security experts are constantly discouraging users from using SMS-based 2FA systems, usually because of worries the auth code could be intercepted by an attacker, either through a SIM swap or a MitM ...
0
votes
2answers
76 views

Password reuse for similar accounts

Assume I have two Github accounts, one for regular use and one for testing purposes. Or two PGP keys, one for pass and the other for encrypted email communication, and my backup scheme is exactly the ...
1
vote
1answer
116 views

Authorization over Internet without storing user details

We have a requirement where we are creating an user generation page over internet for various vendors. This was earlier done by our operations team on intranet. For each vendor to create a unique ID ...
0
votes
1answer
167 views

Is the zero trust approach really so safe? [closed]

Recently, I see so many emerging vendors that are advertising their use of zero-trust. What potential risks are we exposed to if we shift to zero-trust in our bank?
2
votes
2answers
87 views

Security controls around data in motion?

I am an Information Security Analyst, trying to understand the difference between data in transit and data in motion. I found the listed below definitions: Data In Transit is defined as data moving ...
1
vote
2answers
123 views

How to create non-generic security requirements for an idea phase?

Our manager often asks us for a quick understanding of what the risks will be based on some idea that the department has been working on during the ideation phase (the business requirements are ...
2
votes
1answer
83 views

How big is the man in the middle threat from outside the network when communicating on an intranet?

I know that certificates and signatures are really important for preventing Man-in-the-middle attacks, among other things. I am not concerned about a third party reading the transmission, only ...
2
votes
1answer
112 views

What are some attacks to consider in a cloud deployment? [duplicate]

I want to discuss the following scenario: I use a cloud provider like Amazon where every instance of the OS is a VM. The hypervisor launches the VMs as needed. So let's assume there are two VMs ...
-1
votes
2answers
73 views

Verify my scenario of Internet infrastructure security [closed]

I have read a bit about Internet infrastructure recently. I have figured out how the IT crimes are easy to cover and quite confident way to perform any attack without traces. I got suprised that is ...
1
vote
2answers
82 views

When are you done decomposing threats?

Our development teams are getting the hang of STRIDE threat discovery, but one issue that remains is related to threat decomposition. The way we see threat analysis is that it consists of identifying ...
121
votes
8answers
20k views

Why is storing passwords in version control a bad idea?

My friend just asked me: "why is it actually that bad to put various passwords directly in program's source code, when we only store it in our private Git server?" I gave him an answer that ...
1
vote
1answer
175 views

Are unbranded home security camera secure? [closed]

I plan on buying a couple of cheap cameras for my home. I plan to put them just inside the doors like the laundry door, I won't be putting them in the bedroom or living room. My major concern is how ...
0
votes
1answer
135 views

What are the risks of placing Amazon Resource Names (ARNs) in VCS repositories?

Amazon Resource Names (ARNs) uniquely identify AWS resources. Amazon requires an ARN when you need to specify a resource unambiguously across all of AWS, such as in IAM policies, Amazon Relational ...
0
votes
2answers
163 views

Security-wise, is an in-browser JavaScript implementation fundamentally different from a server-side language (e.g. Python) implementation?

As I understand it, JavaScript implementations running in browsers need to run untrusted code and operate on untrusted data in a secure manner. Language (e.g. Python) implementations running on a ...
2
votes
1answer
98 views

What are the risks of posting family pictures online without any access control?

What are the risks of posting family pictures online, for example on a blog site, without any access control in place? What should be my threat model? I am weary of posting (recognizable) pictures ...
3
votes
3answers
134 views

Is a threat model totally subjective or can it be based on objective guidelines?

We all know that in the security field everything depends on the threat model, which basically means you need to define who or what you are protecting from. But who should decide this, and on what ...
1
vote
1answer
156 views

Relationship between threat analysis and attack modeling

What could be the Relationship between threat analysis and attack modeling. Both are pretty close, have different perspectives but I need to know the relationships or in other words, how can they ...
3
votes
2answers
2k views

Difference between STRIDE and Mitre ATTACK

When looking at threat models I came across STRIDE (from Microsoft) and then came across Mitre ATT&CK, they seem to be different - one is a threat model and the other is a threat intelligence ...
1
vote
1answer
265 views

When to model a concept via object vs taxonomy vs galaxy in MISP?

Taxonomies in MISP are a triple of (namespace, predicate, value) referred to as "machinetags". Galaxies seem to be similar. The MISP galaxy docs state that MISP galaxy is a simple method to ...
3
votes
3answers
188 views

Convince an executive to mandate HTTPS use on Intranet web servers

I know someone who works at a medium-sized company (between 1000 and 10,000 employees) and is somewhat chagrined that several intranet Windows web servers (SharePoint, internal apps, etc.) continue to ...
3
votes
1answer
157 views

What is the risk of reusing the ATM Pin elsewhere when they tie to EMV cards?

What is the risk in the following scenario: A bank wants to use an ATM pin (debit card and/or credit card) as an additional form of authentication after the customer logs in to her online/mobile ...
1
vote
0answers
29 views

developing a metrics for prioritizing attack patterns based on a database for attack patterns(CAPEC) [closed]

I have data on attack patterns which has various attributes like severity of attack, attackers skill, attack likelihood all in the form of linguistic values like high, medium and low. I want to ...
3
votes
2answers
144 views

Granularity for data assets when determining risk during software development

We're currently constructing a security development lifecycle in our software development corporation. Our main idea is to have an asset-driven approach, where we: Enter assets into an asset ...
138
votes
12answers
31k views

Is public Wi-Fi a threat nowadays?

In my opinion, arguments we have been using for years to say that public Wi-Fi access points are insecure are no longer valid, and so are the recommended remedies (e.g. use VPN). Nowadays, most sites ...
0
votes
5answers
578 views

What is ideal way to store passwords?

I am wondering what I should do with my passwords. I have divided the accounts by importance into two groups: a) the first one which are accounts like this one I am writing from. I have set them to ...
1
vote
2answers
235 views

What threat model implies any benefit to drug dealers using candy bar dumb phones for business with iPhones for personal use?

I mean if law enforcement or other state actors are surveiling their comms, it makes sense to have it be anonymous, but I just saw a guy who was obviously a drug dealer in the underground with an ...
6
votes
2answers
415 views

How to calculate the risk rating of a feature?

I'm working on a threat modeling/architectural risk analysis (ARA) methodology for the organization I work for. Our business consists of one major product (developed by ~500 developers over a decade). ...
2
votes
0answers
217 views

How do adversary models and security types relate [closed]

Reading some questions in this forum I encountered this answer mentioning IND-CPA as a requirement for ciphers. It got me thinking about this paper I recently read, where a formal model of the Honest-...
2
votes
2answers
135 views

Surveillance threat modeling applied to social categories

I am researching users threat models for a documentary film dedicated to surveillance. The idea is to identify the threat model (asset to protect, attacker, attacker's capabilities, threat, risk of an ...
3
votes
1answer
726 views

Is Threat Risk Assessment the same as Threat Risk Modeling?

I've been asked to help fill out a survey and one of the questions is whether a Threat Risk Assessment has been performed on a blog we're setting up for a charity. The WordPress blog will use a free ...
2
votes
0answers
1k views

Microsoft Threat Modeling tool: how to avoid Spoofing of Destination Data Store

I have a threat model with a Cloud Storage entity an Managed Application which accesses it. Here is the diagram: The Microsoft Threat Modeling Tool says in the report that: Cloud Storage may be ...
5
votes
3answers
269 views

Are personas used in information security? (like in UX)

In the UX field, personas are used to help designers think like the future end-users. Is this technique also used in the field of information security, i.e. to think like a hacker in order to ...
59
votes
1answer
4k views

What's the Impact of the CloudFlare Reverse Proxy Bug? (“#CloudBleed”)

In Project Zero #1139, it was disclosed that CloudFlare had a bug which disclosed uninitialized memory, leaking private data sent through them via SSL. What's the real impact?
-5
votes
1answer
220 views

Why threat modelling and risk planning does not consider the sex of users? [closed]

Isn't it scientifically proven that men and women have very different psychologies? So that, at least they must have different attitudes towards security policies and guidelines compliance. All of ...
4
votes
4answers
855 views

Whatsapp is adding passwords: what is the threat model that they want to protect their users from?

Whatsapp has announced that they are introducing 2FA to their service. Normally, services rely on a password (what you know), and adding 2FA means that they require an additional code sent via SMS to ...
2
votes
1answer
120 views

How do you scale threat modeling?

Small threat models are relatively easy to build but building and maintaining a threat model that contains a few dozen components becomes difficult pretty quickly. What tools do you use to ...
0
votes
1answer
812 views

Tutorial for learning Threat Modeling at enterprise level [closed]

I am bit new to the field of Information Security. I am aware about OWASP Top 10, SANS Top 25 etc. standards. Recently my job role requires me to learn Threat Modeling. Does any one hold pointer to ...
0
votes
1answer
702 views

Stateful vs Stateless *host* firewall - is there any advantage?

In the case of a firewall device seperate from a server host, I believe there is a clear benefit to using a stateful firewall. But in the case of a host firewall, where the services in scope are ...
1
vote
1answer
200 views

Threat Model for a third party messaging application for an organisation [closed]

Are there any templates or guides anywhere which illustrate how threat models should be documented? For example, what kind of threats are there for cloud-based/ third party instant messaging services?...
1
vote
2answers
369 views

Understanding risk analysis and threat modelling in practice

I am doing research in the security of cloud computing. The purpose of the following questions is to understand the relationship between "risk analysis" and "threat modeling": Do we usually analyze ...
13
votes
2answers
2k views

What is the threat model for AWS EBS volumes encryption?

AWS provides the ability to encrypt EBS volumes, the value of which I am wondering about. In the "Overview of Security Processes (October 2016)" whitepaper, page 24, they say: Encryption of ...
0
votes
1answer
305 views

Micrsoft Threat Modeling Tool 2016 make a bi-directional connect [closed]

How do you make to two processes Bi-directional? I see that sometimes when I right click on the MS threat modeling tool that there is a bidirectional option but it is greyed out.
2
votes
2answers
709 views

How to determine the threat agent for analyzing risk of a threat?

When doing Risk Assessment of a threat, how can I find the best threat agent for the risk assessment? For example, the asset which has the vulnerability related to the threat may be in an internal ...
2
votes
4answers
175 views

Threat modelling - including threats one cannot mitigate?

When threat modelling, should you include the threats a system cannot mitigate? If so, where should you stop? It could be very time-consuming to list all the threats one cannot mitigate.
-2
votes
1answer
368 views

Is ETSI TVRA a risk assessment or threat modeling tool? [closed]

Is ETSI TVRA TS 102 153 165-1 a risk assessment tool or threat modeling tool? And what's the justification? The purpose of the question is to be able to answer if TVRA is suitable to be mapped to ...