From 0198667ca2da1a9d070ea17676de75079128f5d9 Mon Sep 17 00:00:00 2001
From: stefan <stefan@i3mint.local>
Date: Sun, 22 Feb 2026 15:38:16 +0100
Subject: 300-NetBSD-RelEng-STRIDE

---
 PlantUML-ModelingTrust/GnuPG-WoT-Download/README.adoc | 11 +++++++++++
 1 file changed, 11 insertions(+)

(limited to 'PlantUML-ModelingTrust/GnuPG-WoT-Download/README.adoc')

diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/README.adoc b/PlantUML-ModelingTrust/GnuPG-WoT-Download/README.adoc
index f3f7e37..59e3da1 100644
--- a/PlantUML-ModelingTrust/GnuPG-WoT-Download/README.adoc
+++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/README.adoc
@@ -12,3 +12,14 @@ image::100-GnuPG-Keysigning-DFD.png[]
 
 image::100-GnuPG-Keysigning-SEQ-KSP-WoT.png[]
 
+
+
+== NetBSD RelEng Attack STRIDE
+
+The ISO Image is built, signed and uploaded to the WWW server, as well as the Signature file and checksums. 
+
+Evil Black Hat hacks the webserver, and swaps the ISO image for a manipulated one with a valid Signature. 
+
+The manipulated Signature verifies the fake-integrity of the manipulated ISO image, but not the authenticity. 
+
+image::300-NetBSD-RelEng-STRIDE.png[]
-- 
cgit v1.2.3

