Threats, Vulnerabilities, Security Controls, and Countermeasures
Description: The objective of this project is to create a comprehensive threat model on a software application of your choosing.
This assignment will require you to critically think through each section to create a comprehensive threat model of one software application. Each student will select a software application that will be the focus of this multi-part assignment throughout the semester.
Each software application must be unique, in other words, no two students can work on the same type of software application.
A Discussion Forum has been created so that each student can announce what topic/software they have selected. This is on a first come, first served basis and
please carefully read all other posts before making your selection.
Note that your selection must be a web-based system that is accessed by users via the Internet.
Examples of system selections are:
• A software application running at your place of work
• Customer relationship management software application
• Human Resources Benefits application
• Bill Payment and Presentment system
• Medical Records / Patient History system
• Employment Application / Skills Inventory / Interview History system
• All Library Systems are off-limits as the example modeling project is based on this type of system
Part 1 Requirements:
1. Select a unique and commonly used web-based software application and post your selection in the Threat Model Topic Discussion Forum (no later than Module 4). Make sure your selection is unique.
2. Refer to the document, Threat Modeling Project Example, for explanations and examples for each section.
3. Complete the following sections of the Threat Model Project based on your chosen software application:
Threat Model Information
External Dependencies
Entry Points
Assets