I have actually come across this thought process a few times within my home’s network as I have kids
that I want to be secure inside and outside of our network.
Step 1: Secure all entry points, protect devices, and limit content available to children.
Step 2: I have identified several different types of threats to my home network as we have multiple
devices (PCs, tablets, Video Game systems) that could be a threat vector. The only external
dependency is the Internet provider’s router that we utilize.
Step 3: I have multiple routers through my home network. One of which is located in my office, I
would include this router, my Personal PC and Company issued work PC as a trust zone.
Step 4:
Physical threats may include any USB devices I am unfamiliar with, or a device (a friend) may have
given to one of my kids to use on their PC.
Logical threats will include any unauthorized activity on my home network, this will require that I
ensure that all vulnerabilities are correctly patched and dealt with.
Administrative threats include bypassing the parental controls or accessing or modifying any controls
I have set in place.
Step 5: My documentation for this threat model would be easier applied as a tiered approach. To
include the objective of this threat assessment, the list devices and entry/exit points on the network,
and produce a simple reporting system for notifications for potential threats. A general understanding
of what process needs to be followed in the home network. Finally, a system in place to ensure that
patches and updates are correctly applying to the devices across the network.
Taylor, C.R., Shue, C.A., & Najd, M.E. (2016, May 22). Computer Science | Academics | WPI.
Whole Home Proxies: Bringing Enterprise-Grade Security to Residential Networks. Retrieved
January 18, 2022, from http://web.cs.wpi.edu/~cshue/research/icc16.pdf
