Grokking Modern Mobile System Design Interview
Vote

0% completed

​

Threat Model and Secure Storage

A threat model describes what must be protected, what an attacker can do, and which controls reduce the risk.

“Encrypt the data” is not a complete threat model. A stolen locked phone, an intercepted connection, and a modified app are different situations.

Connect each threat to a control

AssetThreatUseful controlRemaining limit
Refresh credentialExtraction from app filesProtected secret storage or encryption keyA compromised running process may still misuse access

.....

.....

.....

Like the course? Get enrolled and start learning!

Reading Progress

0%

Vote for new content