Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

Threat Modeling: Denial of Service and Elevation of Privilege

via LinkedIn Learning

Go to class Write review

Details

Provider

LinkedIn Learning
Pricing

Free Trial Available
Languages

English
Certificate

Certificate Available
Duration & workload

46 minutes
Sessions

On-Demand
Level

Advanced

Found in

Part of

Improve Your Threat Modeling Skills

Scrimba

Our career paths help you become job ready faster

TrainSec

Master Windows Internals - Kernel Programming, Debugging & Architecture

Overview

Coursera Flash Sale

40% Off Coursera Plus for 3 Months!

This final installment of the Threat Modeling series covering the STRIDE framework explains denial-of-service and elevation-of-privilege attacks.

Syllabus

Introduction

Let me interrupt you
STRIDE and the four question framework

1. DoS Targets

DoS in context
Attackers fill networks
How attackers redline your CPU
How attackers fill storage
How attackers spend your budget
How attackers drain your battery

2. Properties of DoS Attacks

Persistence and transience of DoS
Naïve to clever: Understanding DoS
Amplified or native: Two modes of DoS

3. DoS in Various Technologies

Mobile and IoT denial of service
Cloud denial of service

4. DoS Defenses

Designing for resilience
Quantity as a defense

5. EOP

What is elevation of privilege?
Input corrupts
Main forms of corrupt input

6. EOP Defenses

Ways to defend against EOP
Validation to defend against elevation
Validate for purpose to prevent elevations
Validation not sanitization for defense
Attenuation in defense
Memory safety as a defensive tool
Stack canaries to protect your code
Sandboxes and isolation protect your environment
Bolt-on or built-in defenses

Conclusion

Making great strides

Taught by

Adam Shostack

Reviews

4.8 rating at LinkedIn Learning based on 101 ratings

Start your review of Threat Modeling: Denial of Service and Elevation of Privilege