Activity 10.2: Threat Modeling with STRIDE
This exercise aims to enhance your ability to systematically identify and address potential threats in a software system or network using a structured threat modeling methodology. By applying a methodology such as STRIDE, you will identify vulnerabilities, propose mitigations, and develop a proactive security plan.
Case Study
A company is developing a new online banking application. This application will handle sensitive customer financial data, including account details, transaction history, and personal information. The application will include features such as user authentication, account management, transaction processing, and customer support.
This is the system description:
- Name: SecureBank online application
- Features:
- User registration and login
- Account balance and transaction management
- Money transfer between accounts
- Customer support chat
- Mobile and web interfaces
This is the system architecture:
- Frontend...
