 | |
  | ||
| ||
| ||||||
| ||||||
Threat Modeling1. What's the difference between the built-in Network Service account and the built-in Local System account? the first has network credentials and the second does not 2.
What types of countermeasures should you incorporate in your design?the first is low privilege and the second is part of the TCB you need to use the former for servers with networked clients, while the latter is used for locally provided services protection 3.
In calculating risk for a given threat, the following factors should be considereddetection reaction all of the above potential damage and likelihood of a successful attack 4.
Authentication answers the question, "Who are you?" What concrete questions could we pose in practice in order to answer this more abstract question?potential damage and number of attackers level of funding of attacker all of the above what do you have? what do you know? what are you made of? all of the above |