Threat modeling

gedit /home/cybrary/Desktop/Guided/mypremiumdealership.json.

Please post your json to https://pastebin.com/

Use Firefox inside the virtual machine to access Pastebin.

Then provide the link they create to us:

It will not let me copy the link here

Can you message me the link?

I just ran though the Guided Exercises, and everything worked as expected:

I notice our diagrams are not the same:

Remember there is a User threat, a Web Traffic threat, and a Workshop API threat (that you later mitigate).

I am facing same issue, could not get the flag

If you follow the lab steps, you can get the flag. The lab works as written, I just did it yesterday. I’m happy to look at your JSON file if you want to paste the link for it here.

Things people tend to do wrong:

1.) They don’t connect data flows properly. When dragging the ends of your data flow to each entity, ensure a yellow box appears around that entity before you release in order that the data flow properly attaches to it. You can also confirm your connection is successful by moving the associated entity around and observing if the data flow moves at the same time.

2.)They don’t create the trust boundary correctly. When you click on a (non-Trust-Boundary) entity, you will see a dotted box surrounding it. Ensure this dotted box is fully encapsulated within each Trust Boundary.

3.) They skip steps.

4.) They forget to Save and write over the Desktop > Guided > mypremiumdealership.json file. Sometimes they create a new file, but the grader is looking only for Desktop > Guided > mypremiumdealership.json.

If you are confident your model is correct but the grader doesn’t agree, please upload the JSON in your model to pastebin.com, and provide the pastebin.com link in your Cybrary Forums post so we can take a peek.