PASTA Threat Model: SoleTrade App
Overview
A threat model of SoleTrade, a sneaker marketplace app, using the Process for Attack Simulation and Threat Analysis (PASTA).
What I did
- Defined business and security objectives: low-friction accounts, protected customer data and compliant payment processing.
- Scoped the technology (API, PKI with AES and RSA, SHA-256 hashing, SQL database), prioritizing the API layer as the connective tissue between client, third parties and backend.
- Worked through the remaining stages to identify threats and vulnerabilities, prioritize attack vectors and recommend mitigations.
The deliverable
