{"id":770,"date":"2015-10-12T12:56:20","date_gmt":"2015-10-12T11:56:20","guid":{"rendered":"http:\/\/crowmoor.se\/blog\/?p=770"},"modified":"2026-10-19T19:34:52","modified_gmt":"2026-10-19T18:34:52","slug":"playing-around-with-security-architecture-testing","status":"publish","type":"post","link":"https:\/\/crowmoor.se\/blog\/?p=770","title":{"rendered":"Playing around with security architecture testing"},"content":{"rendered":"<p>The last weeks I have been testing out SecuriCAD and tried to understand if it provides me with some value in my line of work. It\u00b4s seldom that I encounter something new under sun but this time I have found a very interesting product. I was asked to conduct a risk analysis recently and decided that I should model the solution first and just see what type of threats it identified. After a bit of struggling understanding how it works I managed to model the solution and it showed me that a simple change in the password policy would actually move the solution to a way more secure setup. It turns out that something as simple as changing the password policy to use 16 characters instead of 10 and combining this with an account lockout for 10 seconds made a brute force attack very hard to conduct. <\/p>\n<p>I would have seen this during the risk analysis of course but still it shows that with correct modelling I would be able to use the tool as an accelerator for me. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>The last weeks I have been testing out SecuriCAD and tried to understand if it provides me with some value in my line of work. It\u00b4s seldom that I encounter something new under sun but this time I have found a very interesting product. I was asked to conduct a risk analysis recently and decided [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[4],"tags":[],"class_list":["post-770","post","type-post","status-publish","format-standard","hentry","category-security-architecture"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/770","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=770"}],"version-history":[{"count":1,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/770\/revisions"}],"predecessor-version":[{"id":771,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/770\/revisions\/771"}],"wp:attachment":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=770"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=770"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=770"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}