Alice's threat model
Alice is very happy with her new deployment. The platform runs great and her team has started using it in earnest. Still, the bond of implicit trust that now exists between her and Bob bothers here. She decides to do a quick threat modelling exercise to calm her mind: instead of wondering about whatifs, she is going to identify the risks associated with her current setup and find ways to mitigate them.
Threats to Confidentiality
If Bob was dishonest (or compelled into acting dishonestly), he would be able to harvest information directly from her server's memory! (She doesn't know Leo is already hard at work)
-
Impacted assets
+ Impacted assets
- decryption keys (eg: her https private key, allowing for complete decryption of her team's traffic)
- sensitive data (ephemeral private messages on her forum that arer only kepy in RAM in an unencrypted form)