Customer Portal Threat Model
18ee4e6e-38f0-45f3-b288-29bc6fdcc3f2
Customer Portal Threat Model
36c84ff9-7b71-4eb3-888d-b6d8f348ca51
36c84ff9-7b71-4eb3-888d-b6d8f348ca51
GE.EI
ExternalEntity
100
700
60
60
Name
Customer Browser
38853b08-9d4e-4467-bd83-e8866b88a785
38853b08-9d4e-4467-bd83-e8866b88a785
GE.P
Process
160
180
60
60
Name
Web App
1feeabca-491e-4ea8-b15a-654882794588
1feeabca-491e-4ea8-b15a-654882794588
GE.P
Process
250
180
60
60
Name
Auth Service
cf9f5b7f-4ab5-44fe-9aa3-76dc10638a8f
cf9f5b7f-4ab5-44fe-9aa3-76dc10638a8f
GE.DS
DataStore
340
180
60
60
Name
Orders Database
0c1cdbc7-aa0e-4f0a-aff3-ea066c9d6db7
0c1cdbc7-aa0e-4f0a-aff3-ea066c9d6db7
GE.TB.B
TrustBoundary
100
100
500
400
Name
Azure Boundary
fddfff28-f1eb-4d68-bd76-9dfda67eb61c
fddfff28-f1eb-4d68-bd76-9dfda67eb61c
36c84ff9-7b71-4eb3-888d-b6d8f348ca51
38853b08-9d4e-4467-bd83-e8866b88a785
Name
HTTPS Request
cb782516-502a-4849-8155-ccdee7c5fc03
cb782516-502a-4849-8155-ccdee7c5fc03
38853b08-9d4e-4467-bd83-e8866b88a785
1feeabca-491e-4ea8-b15a-654882794588
Name
Auth Check
74d9e8f0-a47c-4f28-a84f-4438e9afb12d
74d9e8f0-a47c-4f28-a84f-4438e9afb12d
38853b08-9d4e-4467-bd83-e8866b88a785
cf9f5b7f-4ab5-44fe-9aa3-76dc10638a8f
Name
Order Query
GT-1
High
Not Started
36c84ff9-7b71-4eb3-888d-b6d8f348ca51
Title
Spoofing of Customer Browser
UserThreatCategory
Spoofing
UserThreatDescription
GT-2
High
Not Started
36c84ff9-7b71-4eb3-888d-b6d8f348ca51
Title
Repudiation of Customer Browser
UserThreatCategory
Repudiation
UserThreatDescription
GT-3
High
Not Started
38853b08-9d4e-4467-bd83-e8866b88a785
Title
Spoofing of Web App
UserThreatCategory
Spoofing
UserThreatDescription
GT-4
High
Not Started
38853b08-9d4e-4467-bd83-e8866b88a785
Title
Tampering of Web App
UserThreatCategory
Tampering
UserThreatDescription
GT-5
High
Not Started
38853b08-9d4e-4467-bd83-e8866b88a785
Title
Repudiation of Web App
UserThreatCategory
Repudiation
UserThreatDescription
GT-6
High
Not Started
38853b08-9d4e-4467-bd83-e8866b88a785
Title
Information Disclosure of Web App
UserThreatCategory
Information Disclosure
UserThreatDescription
GT-7
High
Not Started
38853b08-9d4e-4467-bd83-e8866b88a785
Title
Denial of Service of Web App
UserThreatCategory
Denial of Service
UserThreatDescription
GT-8
High
Not Started
38853b08-9d4e-4467-bd83-e8866b88a785
Title
Elevation of Privilege of Web App
UserThreatCategory
Elevation of Privilege
UserThreatDescription
GT-9
High
Not Started
1feeabca-491e-4ea8-b15a-654882794588
Title
Spoofing of Auth Service
UserThreatCategory
Spoofing
UserThreatDescription
GT-10
High
Not Started
1feeabca-491e-4ea8-b15a-654882794588
Title
Tampering of Auth Service
UserThreatCategory
Tampering
UserThreatDescription
GT-11
High
Not Started
1feeabca-491e-4ea8-b15a-654882794588
Title
Repudiation of Auth Service
UserThreatCategory
Repudiation
UserThreatDescription
GT-12
High
Not Started
1feeabca-491e-4ea8-b15a-654882794588
Title
Information Disclosure of Auth Service
UserThreatCategory
Information Disclosure
UserThreatDescription
GT-13
High
Not Started
1feeabca-491e-4ea8-b15a-654882794588
Title
Denial of Service of Auth Service
UserThreatCategory
Denial of Service
UserThreatDescription
GT-14
High
Not Started
1feeabca-491e-4ea8-b15a-654882794588
Title
Elevation of Privilege of Auth Service
UserThreatCategory
Elevation of Privilege
UserThreatDescription
GT-15
High
Not Started
cf9f5b7f-4ab5-44fe-9aa3-76dc10638a8f
Title
Tampering of Orders Database
UserThreatCategory
Tampering
UserThreatDescription
GT-16
High
Not Started
cf9f5b7f-4ab5-44fe-9aa3-76dc10638a8f
Title
Repudiation of Orders Database
UserThreatCategory
Repudiation
UserThreatDescription
GT-17
High
Not Started
cf9f5b7f-4ab5-44fe-9aa3-76dc10638a8f
Title
Information Disclosure of Orders Database
UserThreatCategory
Information Disclosure
UserThreatDescription
GT-18
High
Not Started
cf9f5b7f-4ab5-44fe-9aa3-76dc10638a8f
Title
Denial of Service of Orders Database
UserThreatCategory
Denial of Service
UserThreatDescription
GT-19
High
Not Started
36c84ff9-7b71-4eb3-888d-b6d8f348ca51
38853b08-9d4e-4467-bd83-e8866b88a785
fddfff28-f1eb-4d68-bd76-9dfda67eb61c
Title
Tampering of HTTPS Request
UserThreatCategory
Tampering
UserThreatDescription
GT-20
High
Not Started
36c84ff9-7b71-4eb3-888d-b6d8f348ca51
38853b08-9d4e-4467-bd83-e8866b88a785
fddfff28-f1eb-4d68-bd76-9dfda67eb61c
Title
Information Disclosure of HTTPS Request
UserThreatCategory
Information Disclosure
UserThreatDescription
GT-21
High
Not Started
36c84ff9-7b71-4eb3-888d-b6d8f348ca51
38853b08-9d4e-4467-bd83-e8866b88a785
fddfff28-f1eb-4d68-bd76-9dfda67eb61c
Title
Denial of Service of HTTPS Request
UserThreatCategory
Denial of Service
UserThreatDescription
GT-22
High
Not Started
38853b08-9d4e-4467-bd83-e8866b88a785
1feeabca-491e-4ea8-b15a-654882794588
cb782516-502a-4849-8155-ccdee7c5fc03
Title
Tampering of Auth Check
UserThreatCategory
Tampering
UserThreatDescription
GT-23
High
Not Started
38853b08-9d4e-4467-bd83-e8866b88a785
1feeabca-491e-4ea8-b15a-654882794588
cb782516-502a-4849-8155-ccdee7c5fc03
Title
Information Disclosure of Auth Check
UserThreatCategory
Information Disclosure
UserThreatDescription
GT-24
High
Not Started
38853b08-9d4e-4467-bd83-e8866b88a785
1feeabca-491e-4ea8-b15a-654882794588
cb782516-502a-4849-8155-ccdee7c5fc03
Title
Denial of Service of Auth Check
UserThreatCategory
Denial of Service
UserThreatDescription
GT-25
High
Not Started
38853b08-9d4e-4467-bd83-e8866b88a785
cf9f5b7f-4ab5-44fe-9aa3-76dc10638a8f
74d9e8f0-a47c-4f28-a84f-4438e9afb12d
Title
Tampering of Order Query
UserThreatCategory
Tampering
UserThreatDescription
GT-26
High
Not Started
38853b08-9d4e-4467-bd83-e8866b88a785
cf9f5b7f-4ab5-44fe-9aa3-76dc10638a8f
74d9e8f0-a47c-4f28-a84f-4438e9afb12d
Title
Information Disclosure of Order Query
UserThreatCategory
Information Disclosure
UserThreatDescription
GT-27
High
Not Started
38853b08-9d4e-4467-bd83-e8866b88a785
cf9f5b7f-4ab5-44fe-9aa3-76dc10638a8f
74d9e8f0-a47c-4f28-a84f-4438e9afb12d
Title
Denial of Service of Order Query
UserThreatCategory
Denial of Service
UserThreatDescription
4.3