Microsoft Threat modelling tool 2016

In the previous article (i.e., Set 1) we have discussed about the introduction of Microsoft threat modelling Tool- from where to download the tool, steps to install the tool, components available for modelling the system using Data Flow Diagram.
In this article we will be discussing the list of attributes for each element and the values of these attributes that are available to the user.

Properties for Processes –

Element Name	Attribute Name	Values
Generic Process	Code Type	Managed/ Unmanaged
	Running As	Kernel
		System
		Network Service
		Local Service
		Administrator
		Standard User with Elevation
		Standard User Without Elevation
		Windows Store App
	Isolation Level	AppContainer
		Low Inegrity Level
		MOICE
		Sandbox
	Accepts Input From	Any Remote User or Entity
		Kernel, System or Local Admin
		Local or Network Service
		Local Standard User with Elevation
		Local Standard User without Elevation
		Windows Store Apps or App Container Processes
		Nothing
		Other
	Implements or uses an Authentication Mechanism	Yes/ No
	Implements or uses an Authorization Mechanism	Yes/ No
	Implements a communication Protocol	Yes/ No
	Sanitizes Input	Yes/ No
	Sanitizes Output	Yes/ No
Managed Application	Code Type	* Managed
Thick client	Code Type	* Unmanaged
Browser Client	Code Type	* Unmanaged
Browser and ActiveX Plugins	ActiveX	No/ Yes
	Browser Plugin Object	No/ Yes
Windows Store Process	Code Type	* Managed
	Context	Local/ Web
	Documents Library Capability	Yes/ No
	Enterprise Authentication capability	Yes/ No
	Internet Client and Sever Capability	Yes/ No
	Internet(Client) Capability	Yes/ No
	Location Capability	Yes/ No
	Microphone Capability	Yes/ No
	Music Library Capability	Yes/ No
	Pictures library Capability	Yes/ No
	Private Networks Client & server Capability	Yes/ No
	Proximity Capapbility	Yes/ No
	Removable Storage Capability	Yes/ No
	Shared User Certificates Capability	Yes/ No
	Text Messaging Capability	Yes/ No
	Videos Library Capability	Yes/ No
	Webcam Capability	Yes/ No

Properties for Data Store –

Element Name	Attribute Name	Value
Generic Data Store	Stores Credentials	No/ Yes
	Stores Log Data	No/ Yes
	Encrypted	No/ Yes
	Signed	No/ yes
	Write Access	Yes/ No
	Removal Storage	Yes/ No
	Backup	Yes/ No
	Shared	Yes/ No
	Store Type	SQL Relational database
		Non Relational Database
		File System
		Registry
		Configuration
		Cache
		HTML5 Storage
		Cookie
		Device
Files System	File System Type	NTFS/ ExFat/ FAT/ ReFS/ IFS/ UDF/ Other
Cookies	HTTP Only	Yes/ No
Devices	GPS	Yes/ No
	Contacts	Yes/ No
	Calender Events	Yes/ No
	SMS Messages	Yes/ No
	Cache Credentials	Yes/ No
	Enterprise Data	Yes/ No
	Messaging Data	Yes/ No
	SIM Storage	Yes/ No
	Other Data	Yes/ No

Properties for External Interactor –

Element Name	Attribute Name	Values
External Interactor	Authenticates Itself	No/ Yes
	Type	Not Selected/ Code/Human
	Microsoft	No/ Yes
Browser	Type	* Code
External Web Application	Type	* Code
External Web Service	Type	* Code
Human User	Type	* Human
Windows Runtime	Type	* Code
Windows .NET Runtime	Type	* Code
Windows RT Runtime	Type	* Code

Properties for DataFlow –

Element Name	Attribute Name	Values
Generic Data Flow	Physical Network	Wire/ Wifi/ Bluetooth/ 2G-4G
	Source Authenticated	Yes/ No
	Destination Authenticated	Yes/ No
	Provides Confidentiality	Yes/ No
	Provides Integrity	Yes/ No
	Transmits XML	Yes/ No
	Contains Cookies	Yes/ No
	SOAP Payload	Yes/ No
	REST Payload	Yes/ No
	RSS Payload	Yes/ No
	JSON Payload	Yes/ No

Note – Asterisk (*) means the attribute values are non modifiable.

Apart from above discussed three main panes. there are three more important options:

Threat Model Information –
You can select this dialog from the FILE Menu. This helps user to add basic information about the threat model in order to establish the risk of the component. It includes following questions:
- Threat Model Name
- Owner
- Contributers
- Reviewer
- High Level System Description
- Assumptions
- External Dependencies
- Title
- Version
Messages –
You can select this dialog from the VIEW Menu. This allows to identify warnings, errors or inconsistencies in the knowledge base.
Notes –
This dialog is also available from VIEW Menu. This is not counted during threat generation or analysis. Notes are basically the comments recorded during model discussion.

For the sample I have chosen the Online Shopping System for the DFD Generation and Consequent threat analysis.
There are three entities in the system:

Administrator: Its job is to login, make changes to credentials of Administrator Account, Add product details, Update Product Details.
Customer: Responsibilities include login, handle its account, search product, purchase product
Sales Manager: It performs following operations in the system – Login, Modify Sales Account.

Thus there are 3 external interactors, 8 processes, 6 Data Stores and 34 Data Flow. I am attaching a snapshot of how DFD looks in the Microsoft Threat Modelling tool and also the original DFD for reference.

DFD in Microsoft Threat Modelling Tool –

Original DFD –

Please note this is just a sample system not a actual functioning system so the understanding of the system and inclusion/ exclusion of process/ external interactors/ data flows/ data stores vary from person to person.
In the next article we will see how to generate threat report for the sample system.

My Personal Notes

Microsoft Threat modelling tool 2016 | Set 2

Recommended Posts: