(17/N) Finally, two threat types that refer to security more than privacy:

#Obstructing

An adversary destroys, withdraws, steals or misappropriates information, access, or resources. The obstruction can be temporary or permanent, partial or total. Obstructing can also occur unintentionally, with the “adversary” being deterioration, malfunction, or disaster.

#Interfering

An adversary deliberately corrupts the integrity or authenticity of information, resources, processes, or interactions. The respective information, resources, processes, or interactions aren’t necessarily controlled or owned by the persons that are affected, and may also be fabricated. Interfering can also occur unintentionally, with the “adversary” being deterioration, malfunction, or disaster.

Start of this thread:
https://mastodon.de/@tuxwise/113503228291818865

#ThreatModeling #4D

(14/N) Having familiarized ourselves with categories of adversaries, their main goals and their respective, overall "modus operandi", let's look at the types of threats posed by them.

Again, it pays to focus on types of threats: We don't want to become mainly alert-triggered, but proactive. There are several frameworks we can borrow ideas from, most notably the LINDDUN framework that is geared toward threats to privacy, and can be extended a bit to cover more ground.

First, our list of threat types:

• #Linking (spotting connections and relationships)
• #Identifying (mapping to identities)
• Undesirable #NonRepudiation or #repudiation
• #Detecting (absence or presence of indicators)
• Data #disclosure (to the unauthorized)
• Manufacturing cooperation (disguised or imposed bad consequences)
• #Obstructing (access, information, resources)
• #NonCompliance
• #Interfering (with information, resources, processes, interactions)

Our definitions of these, for our context:

Linking

An adversary can figure out connections and relationships between formerly isolated items of interest.

Identifiying

An adversary can link items of interest directly to a natural person.

(to be continued)

Start of this thread:
https://mastodon.de/@tuxwise/113503228291818865

LINDDUN:
https://linddun.org/

#ThreatModeling #4D

#Advocates say #Fascist #Florida #Governor #RonDeSantis #administration is #interfering in #abortionrights #election #fight

"In a series of unprecedented moves this week, #Florida’s #government has escalated its efforts to #sabotage #Amendment4, using #state #resources to #attack the #citizen-led #ballot #initiative aimed at restoring #women’s #healthcare #rights

https://www.tallahassee.com/story/news/politics/elections/2024/09/06/advocates-desantis-admin-interfering-in-abortion-amendment-vote/75100416007/