Nimrics · Blog · InfoSec
Notes & essays.
Threat Modelling: How to Think Like an Attacker
You can’t defend against “hackers”, only specific people on specific paths. Four questions, STRIDE, attack trees, and a first threat model in 90 minutes.
Read
The CIA Triad: What Information Security Protects
Security is three promises: confidentiality, integrity and availability. What each really means, where they collide, and how the triad decides where money goes.
Read