Threat Me Right: A Human HARMS Threat Model for Technical Systems
Fuente:
arXiv
Salvato in:
| Autori principali: | , , |
|---|---|
| Natura: | Preprint |
| Pubblicazione: |
2025
|
| Soggetti: | |
| Accesso online: | |
| Tags: |
Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
|
| _version_ | 1866913818607616000 |
|---|---|
| author | Turk, Kieron Ivy Talas, Anna Hutchings, Alice |
| author_facet | Turk, Kieron Ivy Talas, Anna Hutchings, Alice |
| contents | Threat modelling is the process of identifying potential vulnerabilities in a system and prioritising them. Existing threat modelling tools focus primarily on technical systems and are not as well suited to interpersonal threats. In this paper, we discuss traditional threat modelling methods and their shortcomings, and propose a new threat modelling framework (HARMS) to identify non-technical and human factors harms. We also cover a case study of applying HARMS when it comes to IoT devices such as smart speakers with virtual assistants. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2502_07116 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | Threat Me Right: A Human HARMS Threat Model for Technical Systems Turk, Kieron Ivy Talas, Anna Hutchings, Alice Cryptography and Security Threat modelling is the process of identifying potential vulnerabilities in a system and prioritising them. Existing threat modelling tools focus primarily on technical systems and are not as well suited to interpersonal threats. In this paper, we discuss traditional threat modelling methods and their shortcomings, and propose a new threat modelling framework (HARMS) to identify non-technical and human factors harms. We also cover a case study of applying HARMS when it comes to IoT devices such as smart speakers with virtual assistants. |
| title | Threat Me Right: A Human HARMS Threat Model for Technical Systems |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2502.07116 |