Threat analysis - Information Mapping II - Revision history

Eva at 16:06, 27 August 2015

2015-08-27T16:06:50Z

Eva at 18:50, 6 August 2015

2015-08-06T18:50:09Z

Eva at 18:49, 6 August 2015

2015-08-06T18:49:16Z

Eva at 18:46, 6 August 2015

2015-08-06T18:46:20Z

Eva at 18:33, 6 August 2015

2015-08-06T18:33:50Z

Eva at 18:28, 6 August 2015

2015-08-06T18:28:09Z

Eva: Created page with "{{Tutorial |Title of the tutorial=Information Mapping Part 2 |Duration (hours)=90m |Learning objectives=Attitudes Critical thinking about threats to sensitive information as..."

2015-08-06T17:54:30Z

Created page with "{{Tutorial |Title of the tutorial=Information Mapping Part 2 |Duration (hours)=90m |Learning objectives=Attitudes Critical thinking about threats to sensitive information as..."

New page

{{Tutorial
|Title of the tutorial=Information Mapping Part 2
|Duration (hours)=90m
|Learning objectives=Attitudes
Critical thinking about threats to sensitive information as it is transferred digitally
Knowledge
Understanding of the how data travels electronically and the points at which it can be subjected to surveillance
Adding important actors including internet service providers, online service providers etc. to the actor maps
Basic threats to information in motion & framework for responses
Skills
Basic information mapping
|Prerequisites=x
|Methodology=x
|Number of facilitators involved=1
|Technical needs=Flipchart/Whiteboard, markers, envelopes, postcards/small sheets of paper, pens, cipher OR two small boxes with keys
|Theoretical and on line resources=Holistic Security Guide

Security in a Box https://securityinabox.org
}}

@@ Line 59: / Line 59: @@
 '''Step 2''' Hand 'Juliet' the open box.  Your lockbox is magical because: You have as many of the same lockbox as you want. You can give it to whomever you want to have send you confidential messages. Once they put their message in your lockbox and send it to you, another lockbox is magically there for them to use. Once they close and lock your lockbox, only its PRIVATE key can open it.
-'''Step 3''' Hand 'Juliet' the key. This is your Private key. ONLY YOU have this key (hand over the key). It is yours, and it is private. Keep your private key very safe.
+'''Step 3''' Hand 'Juliet' the key. This is your Private key. ONLY YOU have this key. It is yours, and it is private. Keep your private key very safe. DON'T lose or share your private key. It will always open this lockbox and all of its copies. If you lose this private key, you will NOT be able to open the lockboxes associated with it. NEVER.
 DON'T lose or share your private key. It will always open this lockbox and all of its copies. If you lose this private key, you will NOT be able to open the lockboxes associated with it. NEVER.
 (Optional) The private key will imprint itself on you the first time, with your kiss. Thereafter it will only work after you kiss it to tell it that it is you who are using it and no one else (metaphor for self-authentication via password). From this point on, the key will only work with your kiss.

← Older revision		Revision as of 18:50, 6 August 2015
Line 91:		Line 91:
	Metadata protected No / No / No / Yes		Metadata protected No / No / No / Yes

−	~~ntroduce the information map for information in motion, explaining each of its parts. Participants fill out the map for information in motion (see handout) for 15 minutes and share reflections.~~

		+	Introduce the information map for information in motion, explaining each of its parts. Participants fill out the map for information in motion (see handout) for 15 minutes and share reflections.

	== Synthesis: Return to Actor Map ==		== Synthesis: Return to Actor Map ==

@@ Line 1: / Line 1: @@
 {{Tutorial
 |Title of the tutorial=Information Mapping Part 2
 |Duration (hours)=90m
 |Learning objectives=To understand how data travels electronically and the points at which it can be subjected to surveillance, adding important actors including internet service providers, online service providers etc. to the actor maps.
 To detect basic threats to sensitive information for responses.
-|Prerequisites=x
+|Prerequisites=Better to do it after actor mapping session.
 |Methodology=Methodology
@@ Line 88: / Line 90: @@
 Metadata protected           No  /      No  /             No        /       Yes
 Suspicious        Depends on content /   No /       Potentially     /  Potentially

@@ Line 78: / Line 78: @@
 Summarise the threats to sensitive information in motion, potential tactics and their advantages and pitfalls after the exercise. You may want to create a table such as the below:
-                        HTTP    /   HTTPS  / End-to-end Encryption  /  TOR
+                            HTTP    /   HTTPS  / End-to-end Encryption  /  TOR
 Content protected
-from ISP (and whomever   No          Yes              Yes               Yes
+from ISP (and whomever       No    /      Yes  /            Yes        /   Yes
 they share it with)
 Content protected from
-website/service owners   No           No               Yes              No
+website/service owners       No   /      No  /            Yes         /    No
 (and whomever they share it with)
-Metadata protected       No           No               No               Yes
+Metadata protected           No  /      No  /             No        /       Yes
-Suspicious      Depends on content    No          Potentially       Potentially
+Suspicious        Depends on content /   No /       Potentially     /  Potentially
 |Number of facilitators involved=1
 |Technical needs=Flipchart/Whiteboard, markers, envelopes, postcards/small sheets of paper, pens, cipher OR two small boxes with keys

@@ Line 14: / Line 14: @@
 '''Step 3.''' Instruct 'Romeo' to write a message to 'Juliet'. Romeo and Juliet will communicate, and since there is no internet, they depend on us to help them.
 == Input: How the Internet Works (45 minutes) ==
@@ Line 67: / Line 66: @@
 Through the postal system like before.  Have Romeo and Juliet exchange lockboxes and have Juliet send Romeo a message in his lockbox.
-'''Step 10 Input'''This process is how a kind of email encryption known as GPG works. Each of us has a public 'lockbox' which we share with everyone, and a private key which is password-protected which we maintain for ourselves and share with nobody. In order to communicate securely, we exchange our public lockboxes. After that, we can use them in certain computer programs to encrypt and send messages.
+'''Step 6 Input''' This process is how a kind of email encryption known as GPG works. Each of us has a public 'lockbox' which we share with everyone, and a private key which is password-protected which we maintain for ourselves and share with nobody. In order to communicate securely, we exchange our public lockboxes. After that, we can use them in certain computer programs to encrypt and send messages.
 However when a 'lockbox' (encrypted message) goes through the postal system, it's clear what it is, at least to Yahoo! Therefore it could be suspicious and draw attention to yourself.
@@ Line 77: / Line 76: @@
 == Deepening: Written Information Map – Information in Motion (30 minutes) ==
-Step 1. Summarise the threats to sensitive information in motion, potential tactics and their advantages and pitfalls after the exercise. You may want to create a table such as the below:
+Summarise the threats to sensitive information in motion, potential tactics and their advantages and pitfalls after the exercise. You may want to create a table such as the below:
 |Number of facilitators involved=1
 |Technical needs=Flipchart/Whiteboard, markers, envelopes, postcards/small sheets of paper, pens, cipher OR two small boxes with keys

@@ Line 2: / Line 2: @@
 |Title of the tutorial=Information Mapping Part 2
 |Duration (hours)=90m
-|Learning objectives=Attitudes
+|Learning objectives=To understand how data travels electronically and the points at which it can be subjected to surveillance, adding important actors including internet service providers, online service providers etc. to the actor maps.
-Critical thinking about threats to sensitive information as it is transferred digitally
+To detect basic threats to sensitive information for responses.
-Knowledge
-Understanding of the how data travels electronically and the points at which it can be subjected to surveillance
-Adding important actors including internet service providers, online service providers etc. to the actor maps
-Basic threats to information in motion & framework for responses
-Skills
-Basic information mapping
 |Prerequisites=x
-|Methodology=x
+|Methodology=Methodology
 |Number of facilitators involved=1
 |Technical needs=Flipchart/Whiteboard, markers, envelopes, postcards/small sheets of paper, pens, cipher OR two small boxes with keys