Threat modeling use case
The objective of this use case is to provide a practical threat model approach to scenarios. We will use the Equifax data breach as an executive summary and the base of the modeling process.
Scenario: You are a CTI analyst in ABCompany, a credit record company that works with several partners, including banks, insurance companies, retail, and manufacturing. Your company also deals with credit disputes through an online web portal where users can log credit record issues with any organization. Due to the recent cyberattacks on the financial and insurance industries and the exposure of personal data in the sector, you have been tasked to research the 2017 Equifax data breach and extract valuable information for other security professionals operating in the design, passive defense, and active defense areas. You must also develop a threat model to identify the resources (and assets) that may be the targets, as well as identify possible TTPs that may be linked...