Chapter 1: Foundation

Security Threat Analysis

• Recall the three steps of a security threat analysis in other situations
• First, we scrutinize all the parts of a system so that we know what each part does and how it interacts with other parts
• Next, we consider possible damage to confidentiality, integrity, and availability
• Finally, we hypothesize the kinds of attacks that could cause this damage

Security Threat Analysis

• We can take the same steps with a network
• We begin by looking at the individual parts of a network:
• local nodes connected via
• local communications links to a
• local area network, which also has
• local data storage, local processes, and local devices.
• The local network is also connected to a
• network gateway which gives access via
• network communications links to
• network control resources,
• network routers, and
• network resources, such as databases.