oxeo0/blog-contributions
1
0
Fork 0
mirror of http://git.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/nihilist/blog-contributions.git synced 2025-07-02 11:56:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

add conclusion

Browse source
This commit is contained in:
midas 2025-01-23 17:31:39 +01:00
parent 0af7aa2b9c
commit cb450cb613
1 changed files with 10 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

19
opsec/cloud_provider_adversary/index.html
View file

@ -217,16 +217,17 @@ in this post we are going to do a threat modelling exercise:<br><br>
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /grey -->
<div id="anon2">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
<h1><b>Conclusion</b></h1>
Following her analysis, Alice understands that having a VPS gives her no privacy from her cloud provider. That all of her traffic and data can easily be seen, copied or moved. She updates her risk analysis and changes her organization's SOPS so her team can have an appropriate behavior when using the services she hosts on this platform. <br><br>
<h2><b>Organizational mitigations</b></h2>
<ul>
<li>Use of codewords when discussing operations and people</li>
<li>Use of onion services to protect the anonymity of her teammates when accessing her services</li>
<li>Use of a separate server with higher security requirements for critical data</li>
</ul>
</div>