Sophia Shahnami
Senior Security Consultant
Research Areas
Authored Publications
Sort By
Mobile Telemetry-Centered Threat Modeling for Managed Enterprise Architectures
IEEE Computer, vol. 59 (2026)
Preview abstract
This work introduces Telemetry-Centered Threat Modeling (TCTM), a vendor- and operating system–agnostic framework designed to assess whether mobile security telemetry is sufficiently authoritative to guide enterprise security policies and automated decision-making. Recognizing that enterprise security workflows frequently falter when acting on intercepted, delayed, or manipulated signals even if endpoint enforcement remains functional, TCTM establishes telemetry as a first-class security surface rather than a passive byproduct. The framework systematically evaluates evidence paths across four essential properties (origin, time-bounded validity, lineage, and binding) to uncover structural pipeline weaknesses before higher-level threat modeling takes place. Ultimately, TCTM bridges the gap between theoretical modeling and operational defense by translating telemetry vulnerabilities into tangible engineering artifacts, including SIEM detection rules, SOAR playbook constraints, and practical mobile testing scenarios.
View details
