<abstract xmlns="http://www.w3.org/1999/xhtml">

<p>In the process of designing and forming each system, it is necessary to identify potential vulnerabilities and threats to that system and to include appropriate countermeasures. The process that helps to find the problem in the first phase of design is called threat modeling. Threat modeling is based on the idea that every system has valuable resources that need to be protected. These resources have certain weak points that internal or external threats can use to harm them, while there are as well countermeasures used to mitigate them. Therefore, this paper analyses the security of a Web of Things (WoT)-based system for remote management of windows, which is in the design stage by using a threat modeling approach based on STRIDE and DREAD. The results obtained through Microsoft Threat Modeling Tool (MTMT) justified the use of threat modeling in the design phase given that we have identified in total 118 threats, with Elevation of privilege class of threats being the most prominent ones. The Information disclosure threats are found to be the ones characterized as medium and low risk ones, while the most represented high-risk threats again come from the Elevation of privilege class of threats.</p>
</abstract>

In the process of designing and forming each system, it is necessary to identify potential vulnerabilities and threats to that system and to include appropriate countermeasures. The process that helps to find the problem in the first phase of design is called threat modeling. Threat modeling is based on the idea that every system has valuable resources that need to be protected. These resources have certain weak points that internal or external threats can use to harm them, while there are as well countermeasures used to mitigate them. Therefore, this paper analyses the security of a Web of Things (WoT)-based system for remote management of windows, which is in the design stage by using a threat modeling approach based on STRIDE and DREAD. The results obtained through Microsoft Threat Modeling Tool (MTMT) justified the use of threat modeling in the design phase given that we have identified in total 118 threats, with Elevation of privilege class of threats being the most prominent ones. The Information disclosure threats are found to be the ones characterized as medium and low risk ones, while the most represented high-risk threats again come from the Elevation of privilege class of threats.

Case Study: Security of System for Remote Management of Windows

B&H Electrical Engineering

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

{"article-title":"Case Study: Security of System for Remote Management of Windows"}

In the process of designing and forming each system, it is necessary to identify potential vulnerabilities and threats to that system and to include...

Case Study: Security of System for Remote Management of Windows

Online veröffentlicht: 01. Nov. 2022

Seitenbereich: 4 - 12

Eingereicht: 01. März 2020

Akzeptiert: 01. Mai 2020

DOI: https://doi.org/10.2478/bhee-2020-0007

Schlüsselwörter
application security, cyber-security, DREAD, human factor, MTMT, network security, STRIDE

© 2020 Tarik Dervišević et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

Case Study: Security of System for Remote Management of Windows

Online veröffentlicht: 01. Nov. 2022

Seitenbereich: 4 - 12

Eingereicht: 01. März 2020

Akzeptiert: 01. Mai 2020

DOI: https://doi.org/10.2478/bhee-2020-0007

Schlüsselwörterapplication security, cyber-security, DREAD, human factor, MTMT, network security, STRIDE

© 2020 Tarik Dervišević et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

Schlüsselwörter
application security, cyber-security, DREAD, human factor, MTMT, network security, STRIDE