Collaborate Disseminate
I am wondering what I should do with my passwords.
I have divided the accounts by importance into two groups:
a) the first one which are accounts like this one I am writing from. I have set them to write some post in forums… Continue reading What is ideal way to store passwords?
evilCurtis Jordan, writing at Dark Reading, regales us with a tale of Advanced Persistent Infrastructure, the underpinnings of cyber; and, today’s paean to Threat Intelligence – Enjoy!
Permalink
The post Advanced Persistent Infrastructure appeared fir… Continue reading Advanced Persistent Infrastructure
I mean if law enforcement or other state actors are surveiling their comms, it makes sense to have it be anonymous, but I just saw a guy who was obviously a drug dealer in the underground with an iPhone in one hand and two No… Continue reading What threat model implies any benefit to drug dealers using candy bar dumb phones for business with iPhones for personal use?
I’m working on a threat modeling/architectural risk analysis (ARA) methodology for the organization I work for. Our business consists of one major product (developed by ~500 developers over a decade). The product contains hun… Continue reading How to calculate the risk rating of a feature?
Reading some questions in this forum I encountered this answer mentioning IND-CPA as a requirement for ciphers. It got me thinking about this paper I recently read, where a formal model of the Honest-But-Curious adversary is … Continue reading How do adversary models and security types relate
I am researching users threat models for a documentary film dedicated to surveillance. The idea is to identify the threat model (asset to protect, attacker, attacker’s capabilities, threat, risk of an attack) of different cat… Continue reading Surveillance threat modeling applied to social categories
I’ve been asked to help fill out a survey and one of the questions is whether a Threat Risk Assessment has been performed on a blog we’re setting up for a charity. The WordPress blog will use a free theme. It will be adminis… Continue reading Is Threat Risk Assessment the same as Threat Risk Modeling?
Adam Shostack provides us with a tremendous write-up of the problem with Password Managers and threat modelin… Continue reading Shostacks’ ‘Threat Modeling Password Managers’
Adam Shostack provides us with a tremendous write-up of the problem with Password Managers and threat modelin… Continue reading Shostacks’ ‘Threat Modeling Password Managers’
I am working on Threat Modeling of business applications in the Finance domain and looking for the various best practises in Threat Modeling, Processes/Tools to use and how to scale them to do TM of hundreds of applications i… Continue reading Threat Modeling Best Practices [on hold]