Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [threat-modeling]

The process of describing possible threats and analyzing their possible affect on target systems.

0
votes
0answers
79 views

I have millions of spam and threat emails hitting our network daily, who wants to buy this data? [on hold]

we see over 10 million threat and spam emails on a daily basis and provide this data to a handful of vendors. Can anyone advise other partners who may also find this feed useful?
1
vote
1answer
109 views

Authorization over Internet without storing user details

We have a requirement where we are creating an user generation page over internet for various vendors. This was earlier done by our operations team on intranet. For each vendor to create a unique ID ...
0
votes
1answer
148 views

Is the zero trust approach really so safe? [closed]

Recently, I see so many emerging vendors that are advertising their use of zero-trust. What potential risks are we exposed to if we shift to zero-trust in our bank?
2
votes
2answers
75 views

Security controls around data in motion?

I am an Information Security Analyst, trying to understand the difference between data in transit and data in motion. I found the listed below definitions: Data In Transit is defined as data moving ...
1
vote
2answers
113 views

How to create non-generic security requirements for an idea phase?

Our manager often asks us for a quick understanding of what the risks will be based on some idea that the department has been working on during the ideation phase (the business requirements are ...
2
votes
1answer
75 views

How big is the man in the middle threat from outside the network when communicating on an intranet?

I know that certificates and signatures are really important for preventing Man-in-the-middle attacks, among other things. I am not concerned about a third party reading the transmission, only ...
2
votes
1answer
104 views

What are some attacks to consider in a cloud deployment? [duplicate]

I want to discuss the following scenario: I use a cloud provider like Amazon where every instance of the OS is a VM. The hypervisor launches the VMs as needed. So let's assume there are two VMs ...
-1
votes
2answers
51 views

Verify my scenario of Internet infrastructure security [closed]

I have read a bit about Internet infrastructure recently. I have figured out how the IT crimes are easy to cover and quite confident way to perform any attack without traces. I got suprised that is ...
1
vote
2answers
73 views

When are you done decomposing threats?

Our development teams are getting the hang of STRIDE threat discovery, but one issue that remains is related to threat decomposition. The way we see threat analysis is that it consists of identifying ...
117
votes
8answers
19k views

Why is storing passwords in version control a bad idea?

My friend just asked me: "why is it actually that bad to put various passwords directly in program's source code, when we only store it in our private Git server?" I gave him an answer that ...
1
vote
1answer
159 views

Are unbranded home security camera secure? [closed]

I plan on buying a couple of cheap cameras for my home. I plan to put them just inside the doors like the laundry door, I won't be putting them in the bedroom or living room. My major concern is how ...
0
votes
1answer
89 views

What are the risks of placing Amazon Resource Names (ARNs) in VCS repositories?

Amazon Resource Names (ARNs) uniquely identify AWS resources. Amazon requires an ARN when you need to specify a resource unambiguously across all of AWS, such as in IAM policies, Amazon Relational ...
0
votes
2answers
158 views

Security-wise, is an in-browser JavaScript implementation fundamentally different from a server-side language (e.g. Python) implementation?

As I understand it, JavaScript implementations running in browsers need to run untrusted code and operate on untrusted data in a secure manner. Language (e.g. Python) implementations running on a ...
2
votes
1answer
97 views

What are the risks of posting family pictures online without any access control?

What are the risks of posting family pictures online, for example on a blog site, without any access control in place? What should be my threat model? I am weary of posting (recognizable) pictures ...
2
votes
3answers
116 views

Is a threat model totally subjective or can it be based on objective guidelines?

We all know that in the security field everything depends on the threat model, which basically means you need to define who or what you are protecting from. But who should decide this, and on what ...
1
vote
1answer
141 views

Relationship between threat analysis and attack modeling

What could be the Relationship between threat analysis and attack modeling. Both are pretty close, have different perspectives but I need to know the relationships or in other words, how can they ...
3
votes
2answers
1k views

Difference between STRIDE and Mitre ATTACK

When looking at threat models I came across STRIDE (from Microsoft) and then came across Mitre ATT&CK, they seem to be different - one is a threat model and the other is a threat intelligence ...
1
vote
1answer
216 views

When to model a concept via object vs taxonomy vs galaxy in MISP?

Taxonomies in MISP are a triple of (namespace, predicate, value) referred to as "machinetags". Galaxies seem to be similar. The MISP galaxy docs state that MISP galaxy is a simple method to ...
3
votes
3answers
184 views

Convince an executive to mandate HTTPS use on Intranet web servers

I know someone who works at a medium-sized company (between 1000 and 10,000 employees) and is somewhat chagrined that several intranet Windows web servers (SharePoint, internal apps, etc.) continue to ...
3
votes
1answer
150 views

What is the risk of reusing the ATM Pin elsewhere when they tie to EMV cards?

What is the risk in the following scenario: A bank wants to use an ATM pin (debit card and/or credit card) as an additional form of authentication after the customer logs in to her online/mobile ...
1
vote
0answers
28 views

developing a metrics for prioritizing attack patterns based on a database for attack patterns(CAPEC) [closed]

I have data on attack patterns which has various attributes like severity of attack, attackers skill, attack likelihood all in the form of linguistic values like high, medium and low. I want to ...
3
votes
2answers
136 views

Granularity for data assets when determining risk during software development

We're currently constructing a security development lifecycle in our software development corporation. Our main idea is to have an asset-driven approach, where we: Enter assets into an asset ...
137
votes
13answers
31k views

Is public Wi-Fi a threat nowadays?

In my opinion, arguments we have been using for years to say that public Wi-Fi access points are insecure are no longer valid, and so are the recommended remedies (e.g. use VPN). Nowadays, most sites ...
0
votes
5answers
483 views

What is ideal way to store passwords?

I am wondering what I should do with my passwords. I have divided the accounts by importance into two groups: a) the first one which are accounts like this one I am writing from. I have set them to ...
1
vote
2answers
232 views

What threat model implies any benefit to drug dealers using candy bar dumb phones for business with iPhones for personal use?

I mean if law enforcement or other state actors are surveiling their comms, it makes sense to have it be anonymous, but I just saw a guy who was obviously a drug dealer in the underground with an ...
6
votes
2answers
362 views

How to calculate the risk rating of a feature?

I'm working on a threat modeling/architectural risk analysis (ARA) methodology for the organization I work for. Our business consists of one major product (developed by ~500 developers over a decade). ...
2
votes
0answers
197 views

How do adversary models and security types relate [closed]

Reading some questions in this forum I encountered this answer mentioning IND-CPA as a requirement for ciphers. It got me thinking about this paper I recently read, where a formal model of the Honest-...
2
votes
2answers
129 views

Surveillance threat modeling applied to social categories

I am researching users threat models for a documentary film dedicated to surveillance. The idea is to identify the threat model (asset to protect, attacker, attacker's capabilities, threat, risk of an ...
3
votes
1answer
582 views

Is Threat Risk Assessment the same as Threat Risk Modeling?

I've been asked to help fill out a survey and one of the questions is whether a Threat Risk Assessment has been performed on a blog we're setting up for a charity. The WordPress blog will use a free ...
2
votes
0answers
1k views

Microsoft Threat Modeling tool: how to avoid Spoofing of Destination Data Store

I have a threat model with a Cloud Storage entity an Managed Application which accesses it. Here is the diagram: The Microsoft Threat Modeling Tool says in the report that: Cloud Storage may be ...
5
votes
3answers
264 views

Are personas used in information security? (like in UX)

In the UX field, personas are used to help designers think like the future end-users. Is this technique also used in the field of information security, i.e. to think like a hacker in order to ...
59
votes
1answer
4k views

What's the Impact of the CloudFlare Reverse Proxy Bug? (“#CloudBleed”)

In Project Zero #1139, it was disclosed that CloudFlare had a bug which disclosed uninitialized memory, leaking private data sent through them via SSL. What's the real impact?
-5
votes
1answer
215 views

Why threat modelling and risk planning does not consider the sex of users? [closed]

Isn't it scientifically proven that men and women have very different psychologies? So that, at least they must have different attitudes towards security policies and guidelines compliance. All of ...
4
votes
4answers
730 views

Whatsapp is adding passwords: what is the threat model that they want to protect their users from?

Whatsapp has announced that they are introducing 2FA to their service. Normally, services rely on a password (what you know), and adding 2FA means that they require an additional code sent via SMS to ...
2
votes
1answer
115 views

How do you scale threat modeling?

Small threat models are relatively easy to build but building and maintaining a threat model that contains a few dozen components becomes difficult pretty quickly. What tools do you use to ...
0
votes
1answer
757 views

Tutorial for learning Threat Modeling at enterprise level [closed]

I am bit new to the field of Information Security. I am aware about OWASP Top 10, SANS Top 25 etc. standards. Recently my job role requires me to learn Threat Modeling. Does any one hold pointer to ...
0
votes
1answer
616 views

Stateful vs Stateless *host* firewall - is there any advantage?

In the case of a firewall device seperate from a server host, I believe there is a clear benefit to using a stateful firewall. But in the case of a host firewall, where the services in scope are ...
1
vote
1answer
187 views

Threat Model for a third party messaging application for an organisation [closed]

Are there any templates or guides anywhere which illustrate how threat models should be documented? For example, what kind of threats are there for cloud-based/ third party instant messaging services?...
1
vote
2answers
345 views

Understanding risk analysis and threat modelling in practice

I am doing research in the security of cloud computing. The purpose of the following questions is to understand the relationship between "risk analysis" and "threat modeling": Do we usually analyze ...
11
votes
2answers
2k views

What is the threat model for AWS EBS volumes encryption?

AWS provides the ability to encrypt EBS volumes, the value of which I am wondering about. In the "Overview of Security Processes (October 2016)" whitepaper, page 24, they say: Encryption of ...
0
votes
1answer
253 views

Micrsoft Threat Modeling Tool 2016 make a bi-directional connect [closed]

How do you make to two processes Bi-directional? I see that sometimes when I right click on the MS threat modeling tool that there is a bidirectional option but it is greyed out.
2
votes
2answers
672 views

How to determine the threat agent for analyzing risk of a threat?

When doing Risk Assessment of a threat, how can I find the best threat agent for the risk assessment? For example, the asset which has the vulnerability related to the threat may be in an internal ...
2
votes
4answers
166 views

Threat modelling - including threats one cannot mitigate?

When threat modelling, should you include the threats a system cannot mitigate? If so, where should you stop? It could be very time-consuming to list all the threats one cannot mitigate.
-2
votes
1answer
325 views

Is ETSI TVRA a risk assessment or threat modeling tool? [closed]

Is ETSI TVRA TS 102 153 165-1 a risk assessment tool or threat modeling tool? And what's the justification? The purpose of the question is to be able to answer if TVRA is suitable to be mapped to ...
2
votes
1answer
95 views

What are the key steps in threat modeling as a user willing to stay anonymous?

I've been looking for standards or guides in threat modeling. I found lot of informations for developers threat modeling when building apps, networks etc.. but I could not find relevant information ...
1
vote
0answers
32 views

SeaSponge Report Generation

I am trying out SeaSponge, a recently developed threat modelling tool which looks interesting. The entry is similar enough to Microsoft's SDL Threat Modelling Tool. However when I click on "Reports" ...
1
vote
2answers
1k views

Threat Modelling Examples (Distributed Systems)

I have threat modelled applications in the past, but I'd like to threat model a distributed system. However for other people I'm with, who have never done it at all, I'd like to check out some ...
0
votes
1answer
87 views

Threat modeling a network monitoring software

Assume a network fault monitoring tools is deployed to monitor a subset of routers. What an attacker can do by exploiting a network monitoring system like OpenNMS? Can they learn about the topology ...
1
vote
1answer
95 views

Threat modeling: why would a https remote endpoint be prone to privilege escalation?

I'm currently creating a threat model for a web application and have a http proxy at the edge of the trusted network. It's communicating with Google Maps via the API, using a https connection; so this ...
1
vote
0answers
158 views

Identifying recon in web

I recently deployed mod_security module in my Apache Web Server. I know the OWASP CRS rules include tags to categorize attacks but I want to make higher level categories, particularly to identify ...