So we've already listed system resources which was relatively easy.
Now we have to define the risk of an attack on those resources using the vulnerabilities we've found.
At this point we should get to know the methods of the attackers if we know them we will better understand
how the attackers could exploit some of the system errors or bugs.
The picture you see in the slide shows an attack methodology from a school of hackers.
This is a Chinese school of hackers that gives professional lessons in breaking into computers.
The picture represents a very general method for an attack in order to pass the subject.
A student must find an e-mail address of a victim or the IP address of its computer as we know from
previous modules.
This is relatively easy because such data is widely available and there are tools that make it easier
to obtain them.
Let's try the left route of the attack after having obtained the email address of the victim.
We send him or her a malicious email.
Then we define testamentary point.
It turns out that the mail server and the email client programs installed on the computer can serve
as the entry point.
The most difficult part is to get the user to open the malicious attachment
to achieve this we could use eye catching photos or interesting content.
Next we have to ensure that we'll be able to access the system repeatedly.
We will start a program that will allow us to take control of the victim's computer and to gain access
to it in the future.
We should fully use the effort we've put into the attack.
If you analyze the diagram from the school of hackers by yourself you will know where is set trust boundaries
and how to counter real threats.
This is what threat modeling is all about.
You have to define the actual threats to your computer to find a way to counter them
risk management is quite complicated.
It requires more skill than setting up the system downloading updates and enabling firewall protection
do.
Therefore we should use reliable solutions only
one such solution is the strike model it divides threats in the six categories according to the consequences
of the attack the attacker can spoof someone's identity that can tamper with data or deny that he or
she performed an action which is called repudiation.
We will discuss each of these in detail later in the seminar and other threat concerns the disclosure
of confidential information obtained by an unauthorized person diyan the stride model sans for the denial
of service attack which is an attempt to make service unavailable to its intended users.
The last category of attack is called elevation of privilege that is gaining unauthorized elevation
of user privileges.
You can see the visualization of the stride model on the right side of the slide.