Security: Review / update Threat Model

zephyrproject-rtos / zephyr

Primary Git Repository for the Zephyr Project. Zephyr is a new generation, scalable, optimized, secure RTOS for multiple hardware architectures.

https://docs.zephyrproject.org

Apache License 2.0

10.2k stars 6.25k forks source link

Security: Review / update Threat Model #22488

Open ceolin opened 4 years ago

ceolin commented 4 years ago

ARM PSA has available three goods Thread Models and Security Analysis (https://developer.arm.com/architectures/security-architectures/platform-security-architecture). We can look them and compare with what we have. List of items to consider:

What happens when mitigations fail ? What are the consequences ? What is compromised ?
Link to features (What is necessary to have true random generator number ? Log is another thing complicated, some pointers to how to achieve what is recommended is really helpfull).

zephyrbot commented 5 months ago

Hi @ceolin,

This issue, marked as an Enhancement, was opened a while ago and did not get any traction. Please confirm the issue is correctly assigned and re-assign it otherwise.

Please take a moment to review if the issue is still relevant to the project. If it is, please provide feedback and direction on how to move forward. If it is not, has already been addressed, is a duplicate, or is no longer relevant, please close it with a short comment explaining the reason.

Thanks!