Lmst

A quotation from Euripides

MEDEA: I shall never accept the favors of friends of yours,
   Nor take a thing from you, so you need not offer it.
   There is no benefit in the gifts of a bad man.

[ΜΉΔΕΙΑ: οὔτ᾽ ἂν ξένοισι τοῖσι σοῖς χρησαίμεθ᾽ ἂν
   οὔτ᾽ ἄν τι δεξαίμεσθα, μηδ᾽ ἡμῖν δίδου:
   κακοῦ γὰρ ἀνδρὸς δῶρ᾽ ὄνησιν οὐκ ἔχει.]

Euripides (485?-406? BC) Greek tragic dramatist
Medea [Μήδεια], l. 616ff (431 BC) [tr. Warner (1944)]

More about (and translations of) this quote: wist.info/euripides/81961/

#quote #quotes #quotation #qotd #euripides #badperson #association #associates #evil #friends #gift #offer #rebuff #refual #rejection #repudiation #spurning

(15/N) Two more threat types defined:

Undesirable non-repudiation or repudiation

#Repudiation (plausible denial) of what somebody has said / done / known / possessed becomes impossible because an adversary has managed to collect enough evidence to establish undesirable non-repudiation. In other words: the adversary can prove beyond reasonable doubt that "it" happened.

Alternatively, #NonRepudiation (proof beyond reasonable doubt) cannot be established because an adversary has managed to suppress or destroy enough evidence to gain the option of repudiation (plausible denial). In other words: the adversary can plausibly deny "it" happened.

Detecting

An adversary can check for the presence or absence of specific data items, which are tell-tale indicators for something else.

(to be continued)

Start of this thread:
https://mastodon.de/@tuxwise/113503228291818865

#ThreatModeling #4D

(14/N) Having familiarized ourselves with categories of adversaries, their main goals and their respective, overall "modus operandi", let's look at the types of threats posed by them.

Again, it pays to focus on types of threats: We don't want to become mainly alert-triggered, but proactive. There are several frameworks we can borrow ideas from, most notably the LINDDUN framework that is geared toward threats to privacy, and can be extended a bit to cover more ground.

First, our list of threat types: