Humanoid Security Platform — STRIDE Threats & Controls Mapping

Humanoid Attack Surfaces, STRIDE Threat Analysis, and Implemented Security Controls

Humanoid Security Platform — STRIDE Threats & Controls Mapping Humanoid Attack Surfaces, STRIDE Threat Analysis, and Implemented Security Controls Flash Tampering · Chip-off / Rootfs Modification · STRIDE Identified Robot Threats · Tampering (Critical) Flash Tampering Chip-off / Rootfs Modification Tampering (Critical) Device Spoofing · Rogue Teleoperation MITM · STRIDE Identified Robot Threats · Spoofing (High) Device Spoofing Rogue Teleoperation MITM Spoofing (High) Key Extraction · Plaintext Private Key Dump · STRIDE Identified Robot Threats · Info Leak (Critical) Key Extraction Plaintext Private Key Dump Info Leak (Critical) Rootkit Injection · Kernel Module Exploit · STRIDE Identified Robot Threats · Privilege (Critical) Rootkit Injection Kernel Module Exploit Privilege (Critical) EROFS + dm-verity · Cryptographic Block Tree · Implemented Defense-in-Depth Security Controls · Immutable Storage EROFS + dm-verity Cryptographic Block Tree Immutable Storage Secure World mTLS · OP-TEE PKCS#11 + fTPM · Implemented Defense-in-Depth Security Controls · Isolated Crypto Secure World mTLS OP-TEE PKCS#11 + fTPM Isolated Crypto SoftHSMv2 Pipeline · Zero Plaintext Key Policy · Implemented Defense-in-Depth Security Controls · PKCS#11 URI SoftHSMv2 Pipeline Zero Plaintext Key Policy PKCS#11 URI KSPP & Signed Modules · CONFIG_MODULE_SIG_FORCE · Implemented Defense-in-Depth Security Controls · Kernel Defense KSPP & Signed Modules CONFIG_MODULE_SIG_FORCE Kernel Defense SRD-STOR / BOOT · Verified Chain of Trust · System Security Requirements (SRD Standards) · Requirement SRD-STOR / BOOT Verified Chain of Trust Requirement SRD-COMM / MEAS · Mutual Auth & Attestation · System Security Requirements (SRD Standards) · Requirement SRD-COMM / MEAS Mutual Auth & Attestation Requirement SRD-HSM Policy · Zero Plaintext Assurance · System Security Requirements (SRD Standards) · Requirement SRD-HSM Policy Zero Plaintext Assurance Requirement SRD-KERN Hardening · Dual-Target Policy Alignment · System Security Requirements (SRD Standards) · Requirement SRD-KERN Hardening Dual-Target Policy Alignment Requirement Mitigated by Mitigated by Mitigated by Mitigated by Satisfies Satisfies Satisfies Satisfies STRIDE Identified Robot Threats Implemented Defense-in-Depth Security Controls System Security Requirements (SRD Standards) Legend Backend Security External