What are the examples of threat modeling in Payment Pal?

Group Component

Individual Contributions

Dean Kane – 40128351

• Attended team meetings
• Contributed and revised system architecture diagram for the final version
• Discussed and drafted business model
• Wrote the description for Web Client and contributed to Backend System.
• Discussed and contributed to the building of asset list
• An initial threat, risk and mitigation discussion

Curtis Greer – 40109923

• Attended team meetings
• Discussed and contributed to the architecture diagram
• Discussed asset list
• Wrote the description for Database, Web Server and contributed to Backend System.
• Assisted with STRIDE modeling threats which were later removed.
• An initial threat, risk and mitigation discussion
• Constructed laundry list of threats

Andrew Ledlie – 40132478

• Attended team meetings
• Discussed business model
• Discussed and contributed to system architecture diagram
• Drew up the initial system architecture diagram that was built on
• Discussed and contributed to asset list
• Assisted with STRIDE modeling threats which were later removed
• An initial threat, risk and mitigation discussion
• Constructed laundry list of threats

Harry Henry – 40133782

• Attended team meetings
• Discussed business model
• Discussed system architecture
• Discussed system architecture diagram
• Discussed asset list
• An initial threat, risk and mitigation discussion

Jonathan Bell – 40127299

• Attended team meetings
• Discussed business model
• Discussed system architecture
• Discussed and contributed to system architecture diagram
• Discussed asset list
• An initial threat, risk and mitigation discussion

Christopher Brown – 40132496

• Contributed to system architecture diagram
• Contributed to system architecture
• Initial description for Database, Backend System, API, and web server
• The discussed threat, risk, and mitigation
• Threat model using ‘Microsoft Threat Analysis and modeling tool’