# Secure updates: A threat model

DevFeed: [Secure updates: A threat model](<https://devfeed.tech/articles/secure-updates-a-threat-model-36967.md>)

Original publisher: [Read original article](<https://shostack.org/blog/secure-updates-threat-model/>)

Author: Adam

Published: 2017-07-10T00:00:00Z

Content type: tutorial

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Requirements](<https://devfeed.tech/topics/requirements.md>), [Software](<https://devfeed.tech/topics/software.md>), [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>), [servers](<https://devfeed.tech/topics/servers.md>), [Code](<https://devfeed.tech/topics/code.md>)

Tags: [requirements](<https://devfeed.tech/tags/requirements.md>), [security](<https://devfeed.tech/tags/security.md>), [software](<https://devfeed.tech/tags/software.md>), [tls](<https://devfeed.tech/tags/tls.md>), [web-server](<https://devfeed.tech/tags/web-server.md>)

## AI overview

This article presents a threat model for secure software update systems. It explains that update systems should identify available updates, install authentic untampered packages, and bind updates to the publishing organization. It recommends signed, dated, sequenced update messages and verifying package signatures, while discussing TLS limitations and distribution over torrents with a fallback.

## Source excerpt

[no description provided]