Uploaded image for project: 'Zero Trust Workload Identity Manager'
  1. Zero Trust Workload Identity Manager
  2. SPIRE-82

Threat Model Findings

XMLWordPrintable

    • Icon: Epic Epic
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • None
    • Threat Model Findings: Zero Trust Workload Identity
    • False
    • Hide

      None

      Show
      None
    • False
    • Not Selected
    • In Progress
    • 0% To Do, 0% In Progress, 100% Done
    • OAPE Sprint 277
    • 1

      The threat model is part of the SDLC.

      After finishing the survey, the tool recommends a set of countermeasures.

      This process helps to identify weaknesses in the system.

       

      This tracker is used by our Threat Modeling tool to keep track of the different risks: https://redhat.sdelements.com/bunits/psse-secure-development/group-3-supporting-and-tooling-offering/openshift-zero-trust-workload-identity-manager/ 

      Please don't close this tracker without speak with the assigned security engineer.

          1.
          		 T1362: Perform message throttling in Web APIs Sub-task In Progress Major Manish Pillai
          2.
          		 T519: Test that input validation is done on all forms of input Sub-task In Progress Major Raushan Kumar Singh
          3.
          		 T14: Enforce the principle of least privilege Sub-task To Do Major Anirudh Agnihotri
          4.
          		 T1376: Provide and maintain guidance on secure installation, maintenance, and configuration of all software components Sub-task To Do Major Anirudh Agnihotri
          5.
          		 T1999: Implement strong network policies (OpenShift) Sub-task In Progress Major Manish Pillai
          6.
          		 T2349: Configure software to have secure settings by default Sub-task In Progress Major Manish Pillai
          7.
          		 T2001: Limit the use of privileged containers (OpenShift) Sub-task In Progress Major Anirudh Agnihotri
          8.
          		 T1989: Run pods with the most restrictive Security Context Constraints possible (OpenShift) Sub-task To Do Major Anirudh Agnihotri
          9.
          		 T536: Restrict the size of incoming messages in services Sub-task In Progress Major Raushan Kumar Singh
          10.
          		 T35: Fine-tune HTTP server settings Sub-task In Progress Major Manish Pillai
          11.
          		 CT4: Kubernetes Operators: good security practices Sub-task To Do Major Anirudh Agnihotri
          12.
          		 T1917: Perform container security assessment Sub-task To Do Major Anirudh Agnihotri
          13.
          		 T248: Protect secret keys and passwords in the application Sub-task In Progress Major Raushan Kumar Singh
          14.
          		 T379: Provide sufficient documentation for security-related features Sub-task To Do Major Unassigned

              tgeer@redhat.com Trilok Geer
              jperezde@redhat.com Juan Ignacio Perez de Algaba Sierra
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: