English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

software component misuse a privileged relationship with the hardware to bypass system protections, monitors, or forensic tools. These relationships areoften not illegal and exist between system components by design. Hence, even asystem with secure hardware and software components, can be architecturallyvulnerable. Unfortunately, the existing threat modeling schemes are notapplicable for modeling architectural attacks against computing platforms. Thisis mostly because the existing techniques rely on an abstract representation ofa software (.e.g., Data Flow Diagram) as a primary requirement which is notavailable for a platform as a whole (considering both hardware and softwareelements). In this paper, we have discussed the necessity of ahardware-software architectural view to system threat modeling. Then, we haveproposed Lamellae, a framework adapts threat modeling method to be applicablefor untrusted platforms by a holistic approach. Lamellae involves systemsecurity architecture for abstract modeling of the platforms. Using the Designstructure matrix analysis, Lamellae helps an end-user to identify possibleattack vectors against a platform. The framework is a connection point ofconcepts from system engineering and software security domains. We have appliedthe framework on a multi-purpose computer with x86-64 architecture as acase-study to show the effectiveness of our framework.

A Threat Modeling Framework for Evaluating Computing Platforms Against Architectural Attacks