Collaborate Disseminate
We are told that the roots of trust in the PKI are the handful of
Certificate Authorities that issue root certificates and sign other certificates and ensure at least some extent of trust to be maintained on the internet.
These root certif… Continue reading Where does the root of trust actually lie?
I am woking on a project where I need to build a blueprint security model for a proxy that should mediate and handle communication between two computers. Because this is a first for me, I don’t have a lot information about "security m… Continue reading How do you build a good security model for a proxy?
The threat landscape evolves with technology, and as threats grow in sophistication, there are concerns about major events like the Colonial Pipeline ransomware attack or the Equifax breach repeating themselves elsewhere. While mainstream media focuses… Continue reading Is next-gen threat modeling even about threats?
I really appreciate those live cyber threat map from FireEye, Checkpoint and others. I have a project idea to make a basic one of my own in possibly Go, Python, or JavaScript, I haven’t decided yet. However, I have no idea where to find … Continue reading A good place to find live cyber threat data?
What’s the difference between on-premises and cloud security threat modeling approaches? Both can help protect against cloud threats and have distinct benefits and risks. The latest tech developments are happening here in the cross-section of cybersecurity and cloud security. More and more treasured data is being kept and used to make data-driven decisions. So, defending […]
The post Threat Modeling Approaches: On Premises or Third Party? appeared first on Security Intelligence.
Continue reading Threat Modeling Approaches: On Premises or Third Party?
The thing about being a security consultant is that people are always looking to you for the “secret” to building a secure digital anything. And by “secret,” they usually mean “shortcut”. There is one simple secret to building secure applications. Unfo… Continue reading The simple secret to app security? Time
I am trying to find vulnerable & small CPS(cyber physical system) devices. I need these because I want to do model checking, threat modelling and other stuffs on them. I’ve tried to search on https://cve.mitre.org/ , but all I am findi… Continue reading How to find Vulnerable Cyber Physical Devices (small ones)? [closed]
I’m working on an academic project to develop a Threat Model for the development of a web application. Can you show me a sample for application architecture review and threat modeling decomposition?
Continue reading Threat Modelling Decomposition for Web Application [closed]
I need to build some kind of graph, visual of parent and child process.
example: using pslist or wmic on windows to generate a csv or txt file .. how to transform these info to a visual graph/tree listing every child process under it’s par… Continue reading Process tree graph [closed]
We are planning to lay out guidelines in our organisation for everyone to follow a secure software development lifecycle. As part of this, we plan to adopt the security knowledge framework (SKF) that provides a checklist based on the ASVS … Continue reading Do we need threat modelling after following ASVS standard?