Category Archives: threat modeling

Could you anonymously upload a file on the internet if the threat model was the entire world trying to find your identity after you do so? [on hold]

Posted on by

Thought experiment: You need to upload a file, and the threat model is the entire world trying to find out who you are after you do so.

I know this is absurd, but bear with me, it’s a thought experiment, where the scenario i… Continue reading Could you anonymously upload a file on the internet if the threat model was the entire world trying to find your identity after you do so? [on hold]→

Malware Threat Hunting in Airport Systems – KPIs/Metrics to Track [on hold]

Posted on by

I am trying to figure out how to detect potential threats from malwares in various systems installed in the airport.

To be specific, my focus is on the following systems in airports:

Baggage Handling System (BHS)
X-ray mac… Continue reading Malware Threat Hunting in Airport Systems – KPIs/Metrics to Track [on hold]→

Cyber Security Threats – Paul Claxton – ESW #156

Posted on by

Cyber Security Threats
The post Cyber Security Threats – Paul Claxton – ESW #156 appeared first on Security Weekly. Continue reading Cyber Security Threats – Paul Claxton – ESW #156→

Should the average user with no special access rights be worried about SMS-based 2FA being theoretically interceptable?

Posted on by

Security experts are constantly discouraging users from using SMS-based 2FA systems, usually because of worries the auth code could be intercepted by an attacker, either through a SIM swap or a MitM attack.

The problem I see… Continue reading Should the average user with no special access rights be worried about SMS-based 2FA being theoretically interceptable?→

OWASP Appsec Tel Aviv 2019, Isaiah Sarju’s ‘How Online Dating Made Me Better At Threat Modeling’

Posted on by

Isaiah Sarju is a Co-Owner of Revis Solutions
Permalink
The post OWASP Appsec Tel Aviv 2019, Isaiah Sarju’s ‘How Online Dating Made Me Better At Threat Modeling’ appeared first on Security Boulevard.
Continue reading OWASP Appsec Tel Aviv 2019, Isaiah Sarju’s ‘How Online Dating Made Me Better At Threat Modeling’→

OWASP Appsec Tel Aviv 2019, Izar Tarandach’s ‘What Do You Mean Threat Model Every Story’

Posted on by

Izar Tarandach is a Lead Product Security Architect at Autodesk
Permalink
The post OWASP Appsec Tel Aviv 2019, Izar Tarandach’s ‘What Do You Mean Threat Model Every Story’ appeared first on Security Boulevard.
Continue reading OWASP Appsec Tel Aviv 2019, Izar Tarandach’s ‘What Do You Mean Threat Model Every Story’→