Dangerzone Threat Model

All Threats

40 threats defined — 26 appear in scenario findings.

Very High	Assume Not Compromised	Is Exposed	Is Memory Safe	Is Sandboxed	Loads Resources	Reads Input	Sanitizes Input	Verifies Resources	Writes To Terminal
CAPEC-123 Buffer Manipulation		R	M	M		R	M
CAPEC-159 Redirect Access to Libraries	M				R*			M*
CAPEC-177 Create files with the same name as...	M				R*			M*
CAPEC-23 File Content Injection		R		M		R
CAPEC-40 Manipulating Writeable Terminal Devices		R					M		R
CAPEC-480 Escaping Virtualization		R		R

High	Assume Not Compromised	Executes Commands	Executes Scripts	Is Build Artifact	Is Code	Is Discoverable	Is Exposed	Is Physical	Is Privileged	Is Reputable	Is Reviewed	Is Sandboxed	Is Verifiable	Loads Resources	Reads Input	Requires Credentials	Sanitizes Input	Uses Network	Uses Strong Credentials	Verifies Resources	Works Offline
CAPEC-141 Cache Poisoning	M													R*						M*
CAPEC-186 Malicious Software Update														R*						M*
CAPEC-19 Embedding Scripts within Scripts			R				R					M					M
CAPEC-440 Hardware Integrity Attack								R					M
CAPEC-444 Development Alteration					R						M
CAPEC-549 Local Execution of Code							R		M*			M
CAPEC-560 Use of Known Domain Credentials																R			M
CAPEC-582 Route Disabling																		R			M
CAPEC-691 Spoof Open-Source Software Metadata				R		R				M
CAPEC-88 OS Command Injection		R										M			R		M

Medium	Assume Not Compromised	Is Discoverable	Is Exposed	Is Fuzzed	Is Memory Safe	Is Privileged	Is Reputable	Is Resource Constrained	Is Sandboxed	Loads Resources	Reads Input	Sanitizes Input	Uses Strong Crypto	Verifies Resources
CAPEC-113 Interface Manipulation			R						M		R	M
CAPEC-129 Pointer Manipulation			R		M				M		R	M
CAPEC-130 Excessive Allocation			R					M			R	M
CAPEC-131 Resource Leak Exposure			R					M			R
CAPEC-145 Checksum Spoofing													M	R
CAPEC-153 Input Data Manipulation			R						M			R
CAPEC-165 File Manipulation			R						M		R	M
CAPEC-176 Configuration/Environment Manipulation	M									R*				M*
CAPEC-234 Hijacking a privileged process			R			R			M
CAPEC-263 Force Use of Corrupted Files	M									R*				M*
CAPEC-28 Fuzzing			R	M							R	M
CAPEC-616 Establish Rogue Location		R					M
CAPEC-639 Probe System Files			R						M

Unknown	Is Backed Up	Is Build Artifact	Is Code	Is Exposed	Is Physical	Is Reproducible	Is Reviewed	Is Sandboxed	Is Secret	Is Verifiable	Loads Resources	Publishes Code	Reads Input	Sanitizes Input	Uses Strong Crypto	Verifies Resources
CAPEC-276 Inter-component Protocol Manipulation								M					R	M
CAPEC-439 Manipulation During Distribution				R						M		R
CAPEC-473 Signature Spoof															M	R
CAPEC-547 Physical Destruction of Device or Component	M			R	R
DZ-1-DEPS											R*					M*
DZ-1-IMG											R*					M*
DZ-1-UPD											R*					M*
DZ-2-BUILD		R				M				M
DZ-2-CODE			R				M
DZ-3				R					R
DZ-4					M				R

Back to Summary