atomicdata-dev / atomic-data-docs

Atomic Data is a specification to make it easier to exchange data.
https://docs.atomicdata.dev
MIT License
17 stars 7 forks source link

Threat modelling like STRIDE for overall security design/principles #119

Open AlexMikhalev opened 2 years ago

AlexMikhalev commented 2 years ago

I think we need to add a threat model, like https://en.wikipedia.org/wiki/STRIDE_(security) into our documentation and also highlight how atomic data server features prevent common threats: Threat Desired property Spoofing Authenticity Tampering Integrity Repudiation Non-repudiability Information disclosure Confidentiality Denial of Service Availability Elevation of Privilege Authorization

For example, what if I want to take over an agent account and I will brute force the private key?