Threat Modeling

Question 1

What is a defensive approach to Threat Modeling?

Answer 1

Prediction of threats and designing in specific defenses during the coding and crafting process, rather than relying on post deployment mitigation such as patches and updates.

Question 2

What is FUZZ testing?

Answer 2

Subjecting software to invalid inputs to trigger known software vulnerabilities such as buffer overflows, software crashes, etc.

Question 3

Name the three types of Threat Modeling?

Answer 3

1. Focused on Assets
2. Focused on Attackers
3. Focused on Software

Question 4

Name the elements of the STRIDE model (Microsoft).

Answer 4

1. Spoofing-bypass security mechanisms with fake credentials
2. Tampering- affect the integrity of
3. Repudiation-ability to deny accountability
4. Information disclosure
5. DoS
6. Elevation of privilege

Question 5

What is the purpose of creating a Threat Model Diagram?

Answer 5

Helps detail the function and purpose of each element of a business task, development process or work activity.

Question 6

What is Reduction Analysis?

Answer 6

Also known as decomposing the application, system, or environment to gain a greater understanding of the logic of products as well as its interactions and external elements.

Question 7

What are the Key Concepts in Reduction Analysis? (TDIPD)

Answer 7

1. Trust Boundaries- where level of trust changes
2. Data Flow Paths- Movement of data between locations
3. Input Points- Location where external input received
4. Privileged Operations- Any activity that requires greater privileges than a standard user
5. Details about Security Stance and Approach- Declaration of the security: policy, foundations and assumptions

Question 8

What is the DREAD system used for?

Answer 8

DREAD is used to rank or rate threats identified in Threat Modeling for prioritization and response

Question 9

What does DREAD stand for?

Answer 9

D=Damage potential-How sever would damage be
R=Reproducibility-How complicated to reproduce the exploit
E=How hard is it to exploit the attack
A=Affected users-How many users can be affected?
D=Discoverability= How hard for an attacker to discover the weakness

Question 10

What are three ways to integrate security risk considerations in an acquisition strategy and practice?

Answer 10

1. Onsite assessment
2. Document and exchange review
3. Process/Policy review

Question 11

What are the elements of a Security Plan?

Answer 11

1. Security policy
2. Standards
3. Baselines
4. Guidelines
5. Procedures