Threat Modeling Lab

Career Paths
1

Please check where I am wrong.

2

image
image725×192 8.24 KB

I’ve tried to check and fix it, but it’s still not successful

3

It looks like you misspelled the threat associated with the Workshop API. In your JSON, you can see the title says “Sever-Side Request Forgery”

            {
              "id": "f3078d96-2c0f-4690-8312-c629350ff740",
              "title": "Sever-Side Request Forgery",
              "status": "Mitigated",
              "severity": "Medium",
              "type": "Tampering",
              "description": "The attacker can indirectly access other systems through request manipulation.",
              "mitigation": "Input validation. Disable URL redirection in the web client. Restrict network access via firewall rules.",
              "modelType": "STRIDE",
              "new": false,
              "number": 15,
              "score": ""
            }
4

Hi, same issue with grade guided not assessing the model.
Pastebin: Threat Modelling Lab - Pastebin.com

image
image736×487 21.3 KB

5

Based on the grader output, it sounds like you’ll need to double-check the connections between the Workshop API and the Database. As noted in the lab guide, when dragging the ends of your data flow to each entity, ensure a yellow box appears around that entity before you release in order that the data flow properly attaches to it.

1 Like