threat modeling nihilists v. vegans
TRANSCRIPT
![Page 1: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/1.jpg)
<location, date>
What the Hell is Threat Modeling Anyway?
Eva Galperin/Parker [email protected]/[email protected]@evacide/@xorElectronic Frontier Foundation
![Page 2: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/2.jpg)
<location, date>
What the hell is a threat model?
![Page 3: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/3.jpg)
<location, date>
1. What do you want to protect?
![Page 4: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/4.jpg)
<location, date>
1. What do you want to protect?2. Who do you want to protect it from?
![Page 5: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/5.jpg)
<location, date>
1. What do you want to protect?2. Who do you want to protect it from?3. How likely is it you will need to protect
it?
![Page 6: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/6.jpg)
<location, date>
1. What do you want to protect?2. Who do you want to protect it from?3. How likely is it you will need to protect
it?4. How bad are the consequences if you
fail?
![Page 7: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/7.jpg)
<location, date>
1. What do you want to protect?2. Who do you want to protect it from?3. How likely is it you will need to protect
it?4. How bad are the consequences if you
fail?5. How much trouble are you willing to go
through to prevent those consequences?
![Page 8: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/8.jpg)
<location, date>
ASSETS
This is what you want to protect.
PasswordsMoneyFilesConversationsMeta-data
![Page 9: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/9.jpg)
<location, date>
ADVERSARY
This is what you want to protect your assets from.
NSAYour classmatesYour parentsThe policeAdvertisers
![Page 10: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/10.jpg)
<location, date>
THREAT
Hackers hijack your Twitter accountYour brother reads your diaryYour boss sees your browser historyCriminals steal your credit card numbersAdversary reads your communicationsAdversary deletes or alters your communications
![Page 11: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/11.jpg)
<location, date>
CAPABILITY
Attacker could file a subpoenaAttacker could break into your houseAttacker could spy on your wifi networkAttacker could put a tracking device on your carAttacker could force you to give up your passwordsAttacker could torture your friends/family for infoAttacker could shoulder-surf your phone password
![Page 12: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/12.jpg)
<location, date>
![Page 13: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/13.jpg)
<location, date>
![Page 14: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/14.jpg)
<location, date>
![Page 15: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/15.jpg)
<location, date>
Then there’s this guy
![Page 16: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/16.jpg)
<location, date>
RISK
![Page 17: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/17.jpg)
<location, date>
People have different appetites for risk
![Page 18: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/18.jpg)
<location, date>
Privacy Nihilists
![Page 19: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/19.jpg)
<location, date>
Privacy Vegans
![Page 20: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/20.jpg)
<location, date>
Security is a process, not a product
• Tools are not enough to protect your privacy
• Build a threat model, then figure out what tools/processes are appropriate
• Your threat model may change over time
![Page 21: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/21.jpg)
<location, date>
![Page 22: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/22.jpg)
<location, date>
You don’t have to a nihilist or a vegan
![Page 23: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/23.jpg)
<location, date>
![Page 24: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/24.jpg)
<location, date>
![Page 25: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/25.jpg)
<location, date>
![Page 26: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/26.jpg)
<location, date>
![Page 27: Threat modeling nihilists v. vegans](https://reader035.vdocuments.mx/reader035/viewer/2022062406/55cf2910bb61ebad668b45ac/html5/thumbnails/27.jpg)
<location, date>
Thanks!
Laura PoitrasBruce SchneierJonathan Stray