Development of a Threat Model when Ensuring Information Security in Messengers Based on Privacy and Anonymity

Abstract

Existing issues with organizing the protection of modern messengers have been analyzed, and the following key questions regarding the risk of threats have been identified. Firstly, there is the issue of data leaks through access by a malicious actor to confidential information from the messenger in case of message interception, access to messages, data extraction from the cloud, successful authentication, etc. Secondly, there is the location disclosure, for example, when activating the current location exchange function. Also, if the messenger allows revealing the mobile phone number, a malicious actor can create a daily schedule of the subscriber's presence in a specific location. Thirdly, there is code vulnerability and compromised software.