tdexample_acctp_modelled.json

{
  "summary" : {
    "title" : "New Threat Model",
    "description" : "An example of the TD threat model. Use the OdTMServer tool to fill it with threats"
  },
  "detail" : {
    "contributors" : [ ],
    "diagrams" : [ {
      "title" : "Example of diagram",
      "thumbnail" : "./public/content/images/thumbnail.jpg",
      "id" : 0,
      "$$hashKey" : "object:20",
      "diagramJson" : {
        "cells" : [ {
          "type" : "tm.Process",
          "size" : {
            "width" : 100,
            "height" : 100
          },
          "position" : {
            "x" : 143,
            "y" : 33
          },
          "angle" : 0,
          "id" : "d8ad6d43-b5ee-46fa-9ef2-ff9af03c55e2",
          "z" : 1,
          "hasOpenThreats" : "true",
          "description" : "class#CloudApplication",
          "attrs" : {
            ".element-shape" : {
              "class" : "element-shape hasNoOpenThreats isInScope"
            },
            "text" : {
              "text" : "webapp"
            },
            ".element-text" : {
              "class" : "element-text hasNoOpenThreats isInScope"
            }
          },
          "threats" : [ {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAA01_FailureOfRemoteService",
            "title" : "AA01 Failure Of Remote Service (from flow 2)",
            "description" : "overview: Unexpected failure of the remote service;\nreason: flow 2;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Denial of service"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAA02_ConnectionLostToRemoteService",
            "title" : "AA02 Connection Lost To Remote Service (from flow 2)",
            "description" : "overview: Connection lost to the remote service;\nreason: flow 2;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Denial of service"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAA03_DataBreachByRemoteService",
            "title" : "AA03 Data Breach By Remote Service (from flow 2)",
            "description" : "overview: Data breach (information disclosure) by the remote service;\nreason: flow 2;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Information disclosure"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAA04_DataLossByRemoteService",
            "title" : "AA04 Data Loss By Remote Service (from flow 2)",
            "description" : "overview: Data loss (modification) by the remote service;\nreason: flow 2;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Tampering"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAA05_SpoofingOfRemoteService",
            "title" : "AA05 Spoofing Of Remote Service (from flow 2)",
            "description" : "overview: Spoofing of the remote service;\nreason: flow 2;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Spoofing"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAD01_BrokenAuthentication",
            "title" : "AD01 Broken Authentication (from flow 1)",
            "description" : "overview: No authentication or broken (weak) authentication by the cloud application;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Spoofing"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAD02_BrokenAccessControl",
            "title" : "AD02 Broken Access Control (from flow 1)",
            "description" : "overview: No access control, broken (weak) access control, and the authorization issues of the cloud application;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Elevation of privilege"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAD03_DataBreachByCloudApplication",
            "title" : "AD03 Data Breach By Cloud Application (from flow 1)",
            "description" : "overview: Data breach (information disclosure) by the cloud application;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Information disclosure"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAD04_DataLossByCloudApplication",
            "title" : "AD04 Data Loss By Cloud Application (from flow 1)",
            "description" : "overview: Data loss (modification) by the cloud application;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Tampering"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAD05_BackupOfCloudApplicationLost",
            "title" : "AD05 Backup Of Cloud Application Lost (from flow 1)",
            "description" : "overview: Lost of cloud application backup;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Denial of service"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAD06_BackupOfCloudApplicationStolen",
            "title" : "AD06 Backup Of Cloud Application Stolen (from flow 1)",
            "description" : "overview: Disclosure of cloud application backups;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Information disclosure"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAD07_LogOfCloudApplicationLost",
            "title" : "AD07 Logs Of Cloud Application Lost (from flow 1)",
            "description" : "overview: Lost of cloud application logs;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Repudiation"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAD08_LogOfCloudApplicationStolen",
            "title" : "AD08 Logs Of Cloud Application Stolen (from flow 1)",
            "description" : "overview: Disclosure of sensitive information from cloud application logs;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Information disclosure"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAE01_DDoSAttackToCloudApplication",
            "title" : "AE01 DDoS Attack To Cloud Application (from flow 1)",
            "description" : "overview: DDoS/DoS attack against cloud application from the Internet;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Denial of service"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAE02_EDoSAttackToCloudApplication",
            "title" : "AE02 EDoS Attack To Cloud Application (from flow 1)",
            "description" : "overview: EDoS (Economic Denial of Sustainability or Economic Denial of Service) attack against cloud application from the Internet;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Denial of service"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAE03_NetworkAttacksToCloudApplication",
            "title" : "AE03 Network Attacks To Cloud Application (from flow 1)",
            "description" : "overview: Remote side can perform remote malicious activities based on misconfiguration or vulnerabilities of the cloud application;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAE04_CloudApplicationAbuse",
            "title" : "AE04 Cloud Application Abuse (from flow 1)",
            "description" : "overview: Malicious usage (abuse) of cloud application from the Internet (e.g. sending spam, participating botnet, mining) after gain control on it;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAE05_BlockSharedResourcesOfCloudApplication",
            "title" : "AE05 Block Shared Resources Of Cloud Application (from flow 1)",
            "description" : "overview: Blocking shared resources of cloud application (e.g. shared external IP) by a third-part reputation service;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Denial of service"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAE06_DisclosureOfCredentialsOfCloudManagementInterface",
            "title" : "AE06 Disclosure Of Credentials Of Cloud Management Interface (from flow 1)",
            "description" : "overview: Disclosure of user credentials of management interface of cloud application;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Information disclosure"
          }, {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericDenialOfService",
            "title" : "Generic DoS threat (from flow 2)",
            "description" : "overview: A generic DoS threat;\nreason: flow 2;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Denial of service"
          }, {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericDenialOfService",
            "title" : "Generic DoS threat (from flow 1)",
            "description" : "overview: A generic DoS threat;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Denial of service"
          }, {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericElevationOfPrivilege",
            "title" : "Generic elevation threat (from flow 2)",
            "description" : "overview: A generic elevation threat;\nreason: flow 2;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Elevation of privilege"
          }, {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericElevationOfPrivilege",
            "title" : "Generic elevation threat (from flow 1)",
            "description" : "overview: A generic elevation threat;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Elevation of privilege"
          }, {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericInformationDisclosure",
            "title" : "Generic information disclosure threat (from flow 2)",
            "description" : "overview: A generic information disclosure threat;\nreason: flow 2;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Information disclosure"
          }, {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericInformationDisclosure",
            "title" : "Generic information disclosure threat (from flow 1)",
            "description" : "overview: A generic information disclosure threat;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Information disclosure"
          }, {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericRepudiation",
            "title" : "Generic repudiation threat (from flow 2)",
            "description" : "overview: A generic repudiation threat;\nreason: flow 2;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Repudiation"
          }, {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericRepudiation",
            "title" : "Generic repudiation threat (from flow 1)",
            "description" : "overview: A generic repudiation threat;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Repudiation"
          }, {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericSpoofing",
            "title" : "Generic spoofing threat (from flow 2)",
            "description" : "overview: A generic spoofing threat;\nreason: flow 2;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Spoofing"
          }, {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericSpoofing",
            "title" : "Generic spoofing threat (from flow 1)",
            "description" : "overview: A generic spoofing threat;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Spoofing"
          }, {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericTampering",
            "title" : "Generic tampering threat (from flow 2)",
            "description" : "overview: A generic tampering threat;\nreason: flow 2;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Tampering"
          }, {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericTampering",
            "title" : "Generic tampering threat (from flow 1)",
            "description" : "overview: A generic tampering threat;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Tampering"
          } ]
        }, {
          "type" : "tm.Actor",
          "size" : {
            "width" : 160,
            "height" : 80
          },
          "position" : {
            "x" : 154,
            "y" : 290
          },
          "angle" : 0,
          "id" : "516f8a7d-144f-40d8-b711-99fdf6f21c27",
          "z" : 3,
          "hasOpenThreats" : "true",
          "description" : "class#RemoteUser",
          "attrs" : {
            ".element-shape" : {
              "class" : "element-shape hasNoOpenThreats isInScope"
            },
            "text" : {
              "text" : "user"
            },
            ".element-text" : {
              "class" : "element-text hasNoOpenThreats isInScope"
            }
          },
          "threats" : [ {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAB01_FailureOfCloudApplication",
            "title" : "AB01 Failure Of Cloud Application (from flow 1)",
            "description" : "overview: Unexpected failure of the cloud application;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Denial of service"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAB02_ConnectionLostToCloudApplication",
            "title" : "AB02 Connection Lost To Cloud Application (from flow 1)",
            "description" : "overview: Connection lost to the cloud application;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Denial of service"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAC01_MalwareFromCloudApplication",
            "title" : "AC01 Malware From Cloud Application (from flow 1)",
            "description" : "overview: Malicious content (malware) from the cloud application;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Tampering"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAC02_PublicNetworkAccessToCloudApplication",
            "title" : "AC02 Public Network Access To Cloud Application (from flow 1)",
            "description" : "overview: Remote user connects to the cloud application though a public network (e.g. Wi-Fi) and can be attacked by a third-party adversary;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Tampering"
          }, {
            "ruleId" : "http://www.grsu.by/net/ACCTP#threatAC03_SocialEngineeringAgainstRemoteUser",
            "title" : "AC03 Social Engineering Against Remote User (from flow 1)",
            "description" : "overview: Remote user suffers from Social Engineering attacks, performed by third-party adversary (e.g. including the cloud application into phishing schema);\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Information disclosure"
          }, {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericRepudiation",
            "title" : "Generic repudiation threat (from flow 1)",
            "description" : "overview: A generic repudiation threat;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Repudiation"
          }, {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericSpoofing",
            "title" : "Generic spoofing threat (from flow 1)",
            "description" : "overview: A generic spoofing threat;\nreason: flow 1;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Spoofing"
          } ]
        }, {
          "type" : "tm.Flow",
          "size" : {
            "width" : 10,
            "height" : 10
          },
          "smooth" : true,
          "source" : {
            "id" : "516f8a7d-144f-40d8-b711-99fdf6f21c27"
          },
          "target" : {
            "id" : "d8ad6d43-b5ee-46fa-9ef2-ff9af03c55e2"
          },
          "vertices" : [ {
            "x" : 104,
            "y" : 199
          } ],
          "id" : "c1f69e5a-688c-419b-a0aa-2cf9321f633a",
          "labels" : [ {
            "position" : 0.5,
            "attrs" : {
              "text" : {
                "text" : "flow 1",
                "font-weight" : "400",
                "font-size" : "small"
              }
            }
          } ],
          "z" : 4,
          "hasOpenThreats" : "true",
          "attrs" : {
            ".marker-target" : {
              "class" : "marker-target hasNoOpenThreats isInScope"
            },
            ".connection" : {
              "class" : "connection hasNoOpenThreats isInScope"
            }
          },
          "threats" : [ {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericDenialOfService",
            "title" : "Generic DoS threat",
            "description" : "overview: A generic DoS threat;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Denial of service"
          }, {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericInformationDisclosure",
            "title" : "Generic information disclosure threat",
            "description" : "overview: A generic information disclosure threat;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Information disclosure"
          }, {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericTampering",
            "title" : "Generic tampering threat",
            "description" : "overview: A generic tampering threat;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Tampering"
          } ]
        }, {
          "type" : "tm.Actor",
          "size" : {
            "width" : 160,
            "height" : 80
          },
          "position" : {
            "x" : 343,
            "y" : 32
          },
          "angle" : 0,
          "id" : "427eb014-f374-4379-8881-122aeb7fc782",
          "z" : 5,
          "hasOpenThreats" : "true",
          "description" : "class#ExternalService",
          "attrs" : {
            ".element-shape" : {
              "class" : "element-shape hasNoOpenThreats isInScope"
            },
            "text" : {
              "text" : "service"
            },
            ".element-text" : {
              "class" : "element-text hasNoOpenThreats isInScope"
            }
          },
          "threats" : [ {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericRepudiation",
            "title" : "Generic repudiation threat (from flow 2)",
            "description" : "overview: A generic repudiation threat;\nreason: flow 2;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Repudiation"
          }, {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericSpoofing",
            "title" : "Generic spoofing threat (from flow 2)",
            "description" : "overview: A generic spoofing threat;\nreason: flow 2;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Spoofing"
          } ]
        }, {
          "type" : "tm.Flow",
          "size" : {
            "width" : 10,
            "height" : 10
          },
          "smooth" : true,
          "source" : {
            "id" : "d8ad6d43-b5ee-46fa-9ef2-ff9af03c55e2"
          },
          "target" : {
            "id" : "427eb014-f374-4379-8881-122aeb7fc782"
          },
          "vertices" : [ {
            "x" : 339,
            "y" : 196
          } ],
          "id" : "e074ceed-6460-4a2e-9b3a-2f8754a4f310",
          "labels" : [ {
            "position" : 0.5,
            "attrs" : {
              "text" : {
                "text" : "flow 2",
                "font-weight" : "400",
                "font-size" : "small"
              }
            }
          } ],
          "z" : 6,
          "hasOpenThreats" : "true",
          "attrs" : {
            ".marker-target" : {
              "class" : "marker-target hasNoOpenThreats isInScope"
            },
            ".connection" : {
              "class" : "connection hasNoOpenThreats isInScope"
            }
          },
          "threats" : [ {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericDenialOfService",
            "title" : "Generic DoS threat",
            "description" : "overview: A generic DoS threat;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Denial of service"
          }, {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericInformationDisclosure",
            "title" : "Generic information disclosure threat",
            "description" : "overview: A generic information disclosure threat;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Information disclosure"
          }, {
            "ruleId" : "http://www.grsu.by/net/OdTMBaseThreatModel#threat_GenericTampering",
            "title" : "Generic tampering threat",
            "description" : "overview: A generic tampering threat;",
            "status" : "Open",
            "severity" : "Medium",
            "type" : "Tampering"
          } ]
        } ]
      },
      "size" : {
        "height" : 590,
        "width" : 790
      }
    } ]
  }
}