Home / Security / Threat Model
Risk Assessment

SECURITY THREAT MODEL.
TRUST BOUNDARIES & DEFENSE.

A realistic security architecture starts with an honest threat model. We analyze every adversary vector—from forensic cable extraction to malicious sideloaded APKs—and document our platform counter-measures.

1. Physical Device Seizure

MITIGATED

Adversary Scenario: An adversary acquires physical possession of a locked device and connects forensic data extraction hardware (Cellebrite/GrayKey) or BadUSB emulation keyboards.

CYRONIX Defenses:
• USB Restricted Mode: Kernel deny_new_usb sysctl disables newly enumerated USB peripherals while locked.
• Full Disk Encryption: Hardware-backed Qualcomm crypto engine forces complete encryption of /data.
• Auto-Wipe: Opt-in destruction of encryption keys after 10 consecutive failed passcode unlock attempts.

2. Malicious Applications

MITIGATED

Adversary Scenario: A rogue third-party app attempts to read sensitive data from other apps, escalate to root, inspect kernel memory, or harvest contacts and photos.

CYRONIX Defenses:
• Kernel Yama LSM: Prevents arbitrary processes from attaching ptrace debuggers to other processes.
• SELinux Strict Enforcing: Zero unconfined domains; untrusted apps are strictly bounded.
• Netfilter Firewall: Cut network access completely per app with one click in Security Center.

3. Network & Wi-Fi MITM

MITIGATED

Adversary Scenario: Compromised public Wi-Fi access point attempts DNS spoofing, packet interception, or delivery of tampered update packages.

CYRONIX Defenses:
• Private DNS over TLS (DoT): Enforces encrypted DNS queries, eliminating plaintext resolver sniffing.
• Strict Update Verification: OTA client checks 4096-bit RSA package signature against on-device otacerts.zip before staging.

4. Bootloader & Flash Tampering

PARTIAL (Hardware Bound)

Adversary Scenario: Attacker with physical access flashes a malicious boot or recovery partition via fastboot.

Honest Hardware Constraint:
• The OnePlus 3T (2016) bootloader lacks modern Android Verified Boot 2.0 (AVB) and has no vbmeta partition.
• Bootloader must remain unlocked to flash custom ROMs.
• Mitigation: CYRONIX Recovery OS enforces release-key verification on all sideloaded update zips.