(CYB250) 4-3 Threat Modeling and Cryptographic Techniques
Description
Overview
In Module three, you were introduced to threat modeling. Practicing threat modeling develops a valuable skill. Therefore, in this exercise, you will review two lesser-known attacks and identify the components of a threat model. This exercise is meant to expand your skill set in identifying events and threats while analyzing attacks reported by other organizations. If the component of the threat model is not directly discernable, it is important that you use your previous knowledge and inference experience to try and identify the component. Within the two articles linked in the Reading and Resources section in Module Four of your course, you will find different uses of cryptography and man-in-the-middle attacks. Analyzing cryptographic techniques is an important skill that security analysts practice to better understand data protection.
This activity relates directly to the final project, where you will be required to complete a threat model for your project scenario and analyze cryptographic techniques. Take advantage of feedback on this assignment to prepare you for your final project submission in Module Seven.
Prompt
Analyze the two articles linked in the Reading and Resources section in Module Four of your course. Use this information to fill out the template and address the critical elements listed below.
Threat Modeling
To complete this assignment, first download the Module Four Stepping Stone Two Template course provided in the What to Submit section. Identify the elements of the threat model by filling in the template for the case studies below.
- Complete column for Bank Attacksthoroughly and accurately.
Complete column for Bluetooth Bugthoroughly and accurately.
- Cryptographic Techniques
Select one of the incidents from the table and analyze the following items:
- Describe the cryptographic techniques employed by the organization in the article.
- Describe how a man-in-the-middle attack compromised the cryptographic technique identified above.
- Describe techniques that could have been used to prevent the man-in-the-middle attack from your selected article.
