SistematikoThreat-Model a Student Portal
Identify assets, actors, trust boundaries, threats, and practical controls for a school information portal.
Explanation
Threat modeling is a structured way to ask what must be protected, who may cause harm, where trust changes, and which controls reduce realistic risk. It is most useful before implementation decisions become expensive.
Students draw a data-flow diagram for a student portal and examine authentication, grade records, uploads, and administrator actions. They prioritize threats using likelihood and impact.
Learning activities
- List sensitive assets and authorized users.
- Draw data flows and mark trust boundaries.
- Prioritize five threats and propose specific controls.
Knowledge check
1. What is a trust boundary?
- A point where trust level changes
- A decorative border
- A database column name
Show answer
A point where trust level changes