Threat Modeling: Repudiation in Depth

Explore repudiation threats and how to defend against them. Learn how to grapple with fraud, identity theft, and repudiation in specific technologies such as blockchain.

Introduction

• The threat of repudiation
• Four-question framework
• Repudiation as part of STRIDE

1. Technical Repudiation

• Message repudiation
• Operational repudiation

2. Fraud

• Buyers and sellers
• Intermediaries
• Account takeover

3. Identity Theft

• Identity theft and repudiation
• Catfishing, deepfakes, and voice cloning

4. Attacks on Logs

• Attacks on logs
• Attacks via logs and response systems

5. Repudiation in Specific Technologies

• Cloud
• AI and machine learning
• Crypto and blockchain

6. Defenses

• Cryptographic defenses
• Logs
• Log analysis
• Anti-fraud

Conclusion

• Next steps