Threat Modeling: Repudiation in Depth
Threat Modeling: Repudiation in Depth
Released: 2/7/2020
Duration: 25m | .MP4 1280x720, 30 fps(r) | AAC, 48000 Hz, 2ch | 139 MB
Genre: eLearning | Language: English
Released: 2/7/2020
Duration: 25m | .MP4 1280x720, 30 fps(r) | AAC, 48000 Hz, 2ch | 139 MB
Genre: eLearning | Language: English
Repudiation—the third stage in the STRIDE threat modeling framework—involves the acceptance or denial of responsibility. In the case of identity theft, repudiation comes into play when victims deny involvement with the charges racked up by the criminal. These threats impact all sorts of systems, and security professionals and developers need to understand how they work, and how they can ensure that their systems offer defenses that accurately indicate responsibility. In this installment of his Threat Modeling series, Adam Shostack takes a deep dive into the subject of repudiation. Using practical examples, Adam covers the issues of fraud, identity theft, attacks on logs, and repudiation in specific technologies such as blockchain and the cloud.
More Info