Threat Modeling Gameplay with EoP

3

Tampering

Tampering is the act of interfering with or modifying something with the intent to cause damage. This could be an act of vandalism; it could be disabling a security system to gain access, as shown in Figure 3.1, or it could be modifying an identity document to gain access to a facility. Tampering comes in many shapes and sizes.

In this chapter, we will cover the different tampering threats described on the cards available in the Tampering deck in the Elevation of Privilege card game. Tampering could affect your data both at rest or in transit, the software systems you use, and the software or hardware you develop. You’ll see that these threats are often caused by design flaws relating to access control, missing integrity checks, ...