Appendix D
Threat Model Summary
SANKET Technical Security & Architecture Whitepaper. Public edition 2.0, 7 October 2026.
Table 75: Threat actors by STRIDE category
| STRIDE category | Principal actors | Principal controls |
|---|---|---|
| Spoofing | Credential thief, rogue device, man-in-the-middle, compromised server | TOTP; administrator security keys; device states and caps; signed device links and device lists; device client certificates; identity pinning; certificate validation |
| Tampering | Network adversary, compromised server, supply-chain attacker | libsignal MACs; GCM tags; TLS; signed releases with sequence and expiry; labels and broadcast priority inside the encryption |
| Repudiation | Malicious insider, privileged administrator | Hash-chained audit; SIEM export |
| Information disclosure | Eavesdropper, database or storage thief, metadata analyst, endpoint malware | E2EE; local encryption; retention; self-hosting |
| Denial of service | DoS attacker, compromised network device | Rate limits; caps; block manager; customer DDoS protection |
| Elevation of privilege | External attacker, lateral mover, malicious update | RBAC; least-privilege tokens; network isolation; signed updates |
The full matrix of twenty-three actors is in Chapter 5.
Evaluating SANKET for your organisation?
Talk to Tosh Defence about a technical briefing, a deployment plan for your infrastructure, or the controlled edition of this whitepaper under a non-disclosure agreement.