Visible to the public Towards a Threat Model and Security Analysis of Video Conferencing Systems

TitleTowards a Threat Model and Security Analysis of Video Conferencing Systems
Publication TypeConference Paper
Year of Publication2021
AuthorsHasan, Raiful, Hasan, Ragib
Conference Name2021 IEEE 18th Annual Consumer Communications Networking Conference (CCNC)
Date Publishedjan
KeywordsAnalytical models, cyber security, Human Behavior, Metrics, Pandemic, privacy, pubcrawl, Real-time Systems, resilience, Resiliency, security, Social factors, Streaming media, threat mitigation, threat model, Tools, Video Conferencing
AbstractVideo Conferencing has emerged as a new paradigm of communication in the age of COVID-19 pandemic. This technology is allowing us to have real-time interaction during the social distancing era. Even before the current crisis, it was increasingly commonplace for organizations to adopt a video conferencing tool. As people adopt video conferencing tools and access data with potentially less secure equipment and connections, meetings are becoming a target to cyber attackers. Enforcing appropriate security and privacy settings prevents attackers from exploiting the system. To design the video conferencing system's security and privacy model, an exhaustive threat model must be adopted. Threat modeling is a process of optimizing security by identifying objectives, vulnerabilities, and defining the plan to mitigate or prevent potential threats to the system. In this paper, we use the widely accepted STRIDE threat modeling technique to identify all possible risks to video conferencing tools and suggest mitigation strategies for creating a safe and secure system.
DOI10.1109/CCNC49032.2021.9369505
Citation Keyhasan_towards_2021