Stay updated with breaking news from Threat Model. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Threat modeling is a technique used in software design to anticipate potential threats, identify vulnerable aspects of the system, and determine how to defend against them.
Introduction At Praetorian, we perform security assessments on a variety of Internet of Things (IoT) devices ranging from commodity home “smart” devices, medical devices, critical infrastructure, and autonomous vehicles. While previous blog posts have discussed a general methodology we’ve followed for a complete assessment, the nature of our “chip-to-cloud” security has led us to one The post Inter-Chip Communication: Design Considerations to Mitigate Commonly Overlooked Attack Paths appeared first on Praetorian.
Introduction The SameSite cookie attribute is designed to defend against CSRF attacks but currently does not take the scheme of the site into account. This was originally to assist sites during their transition to https, however it results in the secure and insecure versions of the same host being considered same-site. A network attacker could thus impersonate http://site.example and use it to bypass SameSite protections on https://site.example. Between this security flaw and HTTPS usage markedly increasing, we believe it is time to change this definition. The web ecosystem is already moving...
Actors, they devolve their tactics. they don't do the same thing again and again. we think about our threat model. what are the new challenges that are coming? what are the new things we haven't seen before that we could see and what are the new twists that might get thrown to us? and we desk that and run that. >> reporter: another challenge, communication. silicon valley and the government have historically had trouble communicating as platforms like twitter and facebook have become weaponized. jack dorsey acknowledged the problem in september. >> we would like a more regular cadence of meeti...
Related content. >> two years after the 2016 election, the attacks have changed. nathaniel, who served on president barack obama's national security council, now leads facebook's efforts to eliminate trolls in state-run disinformation campaigns. >> one of the challenge we always face is if you have sophisticated threat actors, they keep evolving their tactics. they don't do the same thing again and again. part of what we have done is we think about the threat model. what are the new challenges coming, what are the think things we haven't seen before. and then we test that and run that. >> anot...