We're gonna need a bigger threat model
Stephen P. Farrell · 2019
We argue that an expanded threat model is needed for Internet protocol development as protocol endpoints can no longer be considered to be generally trustworthy for any general definition of trustworthy.