Example: Threat modeling financial system workflow

This example follows a fictitious company named Centurion Bank & Trust, a financial institution implementing a new online banking system. This demonstrates how systematic security analysis can help the bank identify critical assets, as well as how they can define relevant threat agents, including external cybercriminals and insider threats. This example will show how a structured approach to threat modeling helps organizations achieve improvements in their security posture through application threat modeling.

Background

The fictional bank Centurion Bank & Trust, a leading financial institution, decided to implement a new online banking system to enhance customer experience and streamline operations. The system allows customers to perform transactions, check account balances, and apply for loans through a web interface.

Objective

Identify potential security threats and vulnerabilities in the new online banking...