Threat modelling
Asking in advance who could misuse something and what the worst outcome could be.
Learn it through a story
- The Interview Question About "CIA" (Cybersecurity for Juniors 2, Ch 10)
Related terms
- Spoofing Faking a caller ID, sender name or address so it looks like it comes from somewhere trustworthy.
- STRIDE A six-question framework (Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege) for threat modeling.
- Threat modeling Systematically asking what could go wrong with a system, and for whom, before or while it's built.
- Three two one rule Keep three copies, on two kinds of storage, with one copy kept somewhere else.
- TLS certificate A credential proving a server's identity and enabling encrypted connections.
- Too-good-to-be-true offer Something valuable offered for nothing, with no real reason given.