Loading...

Messages

Proposals

Stuck in your homework and missing deadline? Get urgent help in $10/Page with 24 hours deadline

Get Urgent Writing Help In Your Essays, Assignments, Homeworks, Dissertation, Thesis Or Coursework & Achieve A+ Grades.

Privacy Guaranteed - 100% Plagiarism Free Writing - Free Turnitin Report - Professional And Experienced Writers - 24/7 Online Support

How to use stride threat model

20/10/2021 Client: muhammad11 Deadline: 2 Day

Project: Threat Modeling with STRIDE

Purpose

This project provides an opportunity to apply the concepts of using a Threat Modeling methodology, STRIDE, against a fictitious Healthcare organization’s application.

Learning Objectives and Outcomes

You will gain an overall understanding of risk management, its importance, and critical processes required when developing a threat model as a part of risk management for an organization.

Required Source Information and Tools

Web References: https://www.webtrends.com/blog/2015/04/threat-modeling-with-stride/

Deliverables

As discussed in this course, risk management is an important process for all organizations. This is particularly true in information systems, which provides critical support for organizational missions. The project activities described in this document allow you to fulfill the role of an employee participating in the risk management process in a specific business situation, identifying the threats and vulnerabilities facing your organization.

Submission Requirements

All project submissions should follow this format:

· Format: Microsoft Word or compatible

· Font: Arial, 10-point, double-space

· Citation Style: APA style. Any work copied from Internet or other sources will automatically receive a 0.

Scenario

You are an information technology (IT) intern working for Health Network, Inc. (Health Network), a fictitious health services organization headquartered in Minneapolis, Minnesota. Health Network has over 600 employees throughout the organization and generates $500 million USD in annual revenue. The company has two additional locations in Portland, Oregon and Arlington, Virginia, which support a mix of corporate operations. Each corporate facility is located near a co-location data center, where production systems are located and managed by third-party data center hosting vendors.

Company Products

Health Network has three main products: HNetExchange, HNetPay, and HNetConnect.

HNetExchange is the primary source of revenue for the company. The service handles secure electronic medical messages that originate from its customers, such as large hospitals, which are then routed to receiving customers such as clinics over the Internet. Information transmitted over this network include patient health information, xrays, bloodwork, and diagnoses.

HNetPay is a Web portal used by many of the company’s HNetExchange customers to support the management of secure payments and billing. The HNetPay Web portal, hosted at Health Network production sites, accepts various forms of payments and interacts with credit-card processing organizations much like a Web commerce shopping cart. The Web portal is hosted on a Windows IIS Web server. Data from the portal is stored in an Oracle database on a Unix server.

HNetConnect is an online directory that lists doctors, clinics, and other medical facilities to allow Health Network customers to find the right type of care at the right locations. It contains doctors’ personal information, work addresses, medical certifications, and types of services that the doctors and clinics offer. Doctors are given credentials and are able to update the information in their profile. Health Network customers, which are the hospitals and clinics, connect to all three of the company’s products using HTTPS connections. Doctors and potential patients are able to make payments and update their profiles using Internet-accessible HTTPS Web sites. You have already run a Nessus scan and used nmap to determine vulnerabilities.

Information Technology Infrastructure Overview

Health Network operates in a production data center that provide high availability across the company’s products. The data center host about 1,000 production servers, and Health Network maintains 650 corporate laptops and company-issued mobile devices for its employees. Employees are allowed to work from home, using their company-issued laptops. There is also a wireless network available at work.

Project

For the project, you must create a threat model, using STRIDE (remember to use the information in the article at the Web link, to understand these sections). To do so, you must analyze the data and create a threat model document that contains the following sections:

1. A section titled Attacker Viewpoint discussing framing the threat from the mindset of the perceived attacker. Address the following questions: 5 points.

a. Who is likely to attack the system?

b. What are they likely to attack to accomplish their goal?

2. A section titled Asset Viewpoint discussing the organization’s assets from the information provided in the scenario, above. Be sure to also address the following questions (I recommend placing this in a table). 15 points

a. What is the asset?

b. What value does the asset have to the organization?

c. How might that asset be exploited by an attacker?

3. A section, titled STRIDE, that will identify the following security threats for six different categories, as discussed in the article in the Web reference you were asked to read, as they apply to this scenario. Include the following: 60 points

a. Spoofing – address any spoofing threats that might be present in the applications or systems. Include the ramifications (impact) of a spoofing attack.

b. Tampering – address any data or databases that might be subject to data tampering (applications, for instance, that might be vulnerable to cross site scripting attacks or SQL injection in the healthcare organization scenario, above).

c. Repudiation – address where repudiation attacks might be possible in the organization.

d. Information disclosure – address where there may be the likelihood for a data breach in the organization’s assets listed in the scenario that would allow the attacker to access private information (or, worse, patient health information). Discuss the laws and regulations that would be impacted and the ramifications (impact and penalities) that would be incurred by this organization in that event.

e. Denial of Service – discuss the potential for service interruptions for those systems or applications connected to the Internet. Which systems are vulnerable? What would be the impact to the organization for each connected system, if it were to be unavailable?

f. Elevation of Privilege – discuss the systems and applications that might be subject to an attacker elevating his privilege levels (think of a patient database - what would happen if the attacker was able to gain Administrator access to the database?).

4. A section, titled Risk Mitigation Plan, that summarizes your findings for the boss and discusses the security controls that you recommend for each of the potential attacks that you have identified. This can be summarized using the table I’ve provided for you below for each of your threats. Remember to assign the implementation of the recommended security control to a role within the organization (you can use a generic role, such as System Administrator, Database Admin, Security Officer, etc. – your textbook and other supplemental readings listed different organizational roles responsible for managing risk) 20 points.

Risk Mitigation Plan:

Asset

Threat

Impact

Recommended Security Control

Responsible Role

Homework is Completed By:

Writer Writer Name Amount Client Comments & Rating
Instant Homework Helper

ONLINE

Instant Homework Helper

$36

She helped me in last minute in a very reasonable price. She is a lifesaver, I got A+ grade in my homework, I will surely hire her again for my next assignments, Thumbs Up!

Order & Get This Solution Within 3 Hours in $25/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 3 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

Order & Get This Solution Within 6 Hours in $20/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 6 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

Order & Get This Solution Within 12 Hours in $15/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 12 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

6 writers have sent their proposals to do this homework:

Peter O.
A+GRADE HELPER
Writing Factory
Phd Writer
Top Class Results
Best Coursework Help
Writer Writer Name Offer Chat
Peter O.

ONLINE

Peter O.

I am an elite class writer with more than 6 years of experience as an academic writer. I will provide you the 100 percent original and plagiarism-free content.

$17 Chat With Writer
A+GRADE HELPER

ONLINE

A+GRADE HELPER

I have written research reports, assignments, thesis, research proposals, and dissertations for different level students and on different subjects.

$23 Chat With Writer
Writing Factory

ONLINE

Writing Factory

I am a PhD writer with 10 years of experience. I will be delivering high-quality, plagiarism-free work to you in the minimum amount of time. Waiting for your message.

$30 Chat With Writer
Phd Writer

ONLINE

Phd Writer

I have read your project details and I can provide you QUALITY WORK within your given timeline and budget.

$17 Chat With Writer
Top Class Results

ONLINE

Top Class Results

As per my knowledge I can assist you in writing a perfect Planning, Marketing Research, Business Pitches, Business Proposals, Business Feasibility Reports and Content within your given deadline and budget.

$31 Chat With Writer
Best Coursework Help

ONLINE

Best Coursework Help

I will be delighted to work on your project. As an experienced writer, I can provide you top quality, well researched, concise and error-free work within your provided deadline at very reasonable prices.

$33 Chat With Writer

Let our expert academic writers to help you in achieving a+ grades in your homework, assignment, quiz or exam.

Similar Homework Questions

History 10 - Uts library journal articles - Ethics in information technology ppt - Rainbird 5000 filter screen cleaning - Operational planning - Theoretical yield of ester - The operations section chief - Fundamentals of electric circuits answers - What does hr 392 mean - Event debrief template free - Similarities between maslow and alderfer - C++ program for taylor series - International retinal research foundation - Words that rhyme with wharf - Beatrice a view from the bridge - Poli 330 week 7 quiz - Moving a charge mastering physics - Arc basic life support flow chart - Discussion Board REPLIES (2) - Similes in macbeth act 2 - Boc medical gas cylinders - Malcolm in the middle water park full episode - Acc 291 exercise 8 11 - Elevated irt no mutations - Chromosomes and mitosis worksheet - Case Study: Mrs. J - Week 5 research literature design sampling and implementation assignment - What pricing strategy does kohls use - Which adjectives support an advertisement's appeal to quality - Pfannenberg asia pacific pte ltd - Are formal statements of expected product performance by the manufacturer - Fahrenheit 451 character analysis - Economics - Percent of nahco3 in alka seltzer - Research paper - Formal report writing - Chip on board manufacturers - Cleveland suburban hockey league message board - Blackout crew ravers binge lyrics - Phil 201 quiz 1 - Angry white men org - Point loma high school yearbook - Stoichiometry mole ratio study lab - American bureau of shipping abs singapore - Princess margaret secondary penticton - Paper – Construction Technology - Paper - Viking diary entry ks2 - Double the consonant and add ed or ing - Triumph of the nerds part 1 summary - Sace bonus points 2017 - What are the first five multiples of 13 - Advantages and disadvantages of promotion mix - Draw erd in visio - Ridente la calma accompaniment - 39 plummer crescent mango hill - Biology - Assignment - Introductory written communication - What is the conjugate acid of hco3 - 2 coments each one 150 words (CITATION AND REFERENCE) - View halloo mary poppins - Sips panels cost per m2 australia - This is america rhetorical analysis essay - In our names rewriting the us death penalty - Uti soap note example - Civica document management system - General certificate of education advanced level sri lanka - Convert powerpoint to word 2013 - Assignment 2 - Charles lackey operates a bakery in idaho falls idaho - Is eosin methylene blue agar selective or differential - What is reducing balance method of depreciation - Search lrn of students - How to create job seeker id - Sap retail configuration guide - 737 800 startup checklist - Ib standard level math formula booklet - Nursing conceptual model and metaparadigm concepts - Do you support or oppose the death penalty? - Four layers of a typical state court system - Https www qcaa qld edu au - Data Analysis - Brave new world unsw - Crisis communication essay - Characteristics of natural approach - Assessment 3 - Blue nile and diamond retailing case study powerpoint - Contract bridge scoring table - Sk277 human biology past papers - St ebbes primary school - Bolman and deal reframing organizations powerpoint - Snapshots require the remotemonitoring option key - What if analysis in excel 2003 - Floating leaf disk photosynthesis lab answer key - Arnold blueprint to cut phase 1 pdf download - Saikaku life of a sensuous woman - Why gender matters chapter summaries - Should writers use they own english - Cryptography - Performance patterns occupational therapy