Title | Towards a Threat Model and Security Analysis of Video Conferencing Systems |
Publication Type | Conference Paper |
Year of Publication | 2021 |
Authors | Hasan, Raiful, Hasan, Ragib |
Conference Name | 2021 IEEE 18th Annual Consumer Communications Networking Conference (CCNC) |
Date Published | jan |
Keywords | Analytical models, cyber security, Human Behavior, Metrics, Pandemic, privacy, pubcrawl, Real-time Systems, resilience, Resiliency, security, Social factors, Streaming media, threat mitigation, threat model, Tools, Video Conferencing |
Abstract | Video Conferencing has emerged as a new paradigm of communication in the age of COVID-19 pandemic. This technology is allowing us to have real-time interaction during the social distancing era. Even before the current crisis, it was increasingly commonplace for organizations to adopt a video conferencing tool. As people adopt video conferencing tools and access data with potentially less secure equipment and connections, meetings are becoming a target to cyber attackers. Enforcing appropriate security and privacy settings prevents attackers from exploiting the system. To design the video conferencing system's security and privacy model, an exhaustive threat model must be adopted. Threat modeling is a process of optimizing security by identifying objectives, vulnerabilities, and defining the plan to mitigate or prevent potential threats to the system. In this paper, we use the widely accepted STRIDE threat modeling technique to identify all possible risks to video conferencing tools and suggest mitigation strategies for creating a safe and secure system. |
DOI | 10.1109/CCNC49032.2021.9369505 |
Citation Key | hasan_towards_2021 |