Guest User

Untitled

a guest
Jun 11th, 2026
48
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 10.84 KB | None | 0 0
  1. {
  2. "version": "2.2.0",
  3. "summary": {
  4. "title": "My Premium Dealership",
  5. "owner": "Jr. Security Engineer",
  6. "description": "\"My Premium Dealership\" is a B2C application with a micro-service architecture that allows users to request mechanic services for their vehicle.",
  7. "id": 0
  8. },
  9. "detail": {
  10. "contributors": [
  11. {
  12. "name": "Iman (Infra)"
  13. },
  14. {
  15. "name": "Devon (Development)"
  16. },
  17. {
  18. "name": "Suzy (Security)"
  19. },
  20. {
  21. "name": "Greta (GRC)"
  22. },
  23. {
  24. "name": "Sal (Stakeholder)"
  25. }
  26. ],
  27. "diagrams": [
  28. {
  29. "id": 0,
  30. "title": "mypremiumdealership.com",
  31. "diagramType": "STRIDE",
  32. "placeholder": "New STRIDE diagram description",
  33. "thumbnail": "./public/content/images/thumbnail.stride.jpg",
  34. "version": "2.2.0",
  35. "cells": [
  36. {
  37. "position": {
  38. "x": 40,
  39. "y": 245
  40. },
  41. "size": {
  42. "width": 112.5,
  43. "height": 60
  44. },
  45. "attrs": {
  46. "text": {
  47. "text": "User"
  48. },
  49. "body": {
  50. "stroke": "#333333",
  51. "strokeWidth": 1.5,
  52. "strokeDasharray": null
  53. }
  54. },
  55. "visible": true,
  56. "shape": "actor",
  57. "zIndex": 2,
  58. "id": "97f211c4-cd4b-411e-8479-e60cf7ff21c6",
  59. "data": {
  60. "type": "tm.Actor",
  61. "name": "User",
  62. "description": "",
  63. "outOfScope": false,
  64. "reasonOutOfScope": "",
  65. "hasOpenThreats": false,
  66. "providesAuthentication": false,
  67. "threats": []
  68. }
  69. },
  70. {
  71. "position": {
  72. "x": 471.25,
  73. "y": 220
  74. },
  75. "size": {
  76. "width": 210,
  77. "height": 110
  78. },
  79. "attrs": {
  80. "text": {
  81. "text": "Microservices"
  82. },
  83. "body": {
  84. "stroke": "#333333",
  85. "strokeWidth": 1.5,
  86. "strokeDasharray": null
  87. }
  88. },
  89. "visible": true,
  90. "shape": "process",
  91. "zIndex": 3,
  92. "id": "783896f5-bc14-4502-865b-11df83d84492",
  93. "data": {
  94. "type": "tm.Process",
  95. "name": "Microservices",
  96. "description": "",
  97. "outOfScope": false,
  98. "reasonOutOfScope": "",
  99. "hasOpenThreats": false,
  100. "handlesCardPayment": false,
  101. "handlesGoodsOrServices": false,
  102. "isWebApplication": false,
  103. "privilegeLevel": "",
  104. "threats": []
  105. }
  106. },
  107. {
  108. "shape": "flow",
  109. "attrs": {
  110. "line": {
  111. "stroke": "#333333",
  112. "targetMarker": {
  113. "name": "block"
  114. },
  115. "sourceMarker": {
  116. "name": "block"
  117. },
  118. "strokeDasharray": null
  119. }
  120. },
  121. "width": 200,
  122. "height": 100,
  123. "zIndex": 10,
  124. "connector": "smooth",
  125. "data": {
  126. "type": "tm.Flow",
  127. "name": "REST",
  128. "description": "",
  129. "outOfScope": false,
  130. "reasonOutOfScope": "",
  131. "hasOpenThreats": false,
  132. "isBidirectional": true,
  133. "isEncrypted": false,
  134. "isPublicNetwork": false,
  135. "protocol": "",
  136. "threats": []
  137. },
  138. "id": "5bc2a3e7-c51f-4b48-929e-508fac413a26",
  139. "labels": [
  140. "REST"
  141. ],
  142. "source": {
  143. "cell": "9eb5724a-c842-41c7-b1f2-1b695d8ac41c"
  144. },
  145. "target": {
  146. "cell": "9eb0fd2c-b84a-43bd-be3e-3a8bc02bd2d1"
  147. }
  148. },
  149. {
  150. "shape": "flow",
  151. "attrs": {
  152. "line": {
  153. "stroke": "#333333",
  154. "targetMarker": {
  155. "name": "block"
  156. },
  157. "sourceMarker": {
  158. "name": "block"
  159. },
  160. "strokeDasharray": null
  161. }
  162. },
  163. "width": 200,
  164. "height": 100,
  165. "zIndex": 10,
  166. "connector": "smooth",
  167. "data": {
  168. "type": "tm.Flow",
  169. "name": "SQL Query",
  170. "description": "",
  171. "outOfScope": false,
  172. "reasonOutOfScope": "",
  173. "hasOpenThreats": false,
  174. "isBidirectional": true,
  175. "isEncrypted": false,
  176. "isPublicNetwork": false,
  177. "protocol": "",
  178. "threats": []
  179. },
  180. "id": "af41805c-6562-423c-8419-4f8cf05af0b2",
  181. "labels": [
  182. "SQL Query"
  183. ],
  184. "source": {
  185. "cell": "9eb0fd2c-b84a-43bd-be3e-3a8bc02bd2d1"
  186. },
  187. "target": {
  188. "cell": "f3b93565-510d-4b23-9726-2e0e233e7e2c"
  189. }
  190. },
  191. {
  192. "shape": "flow",
  193. "attrs": {
  194. "line": {
  195. "stroke": "#333333",
  196. "targetMarker": {
  197. "name": "block"
  198. },
  199. "sourceMarker": {
  200. "name": "block"
  201. },
  202. "strokeDasharray": null
  203. }
  204. },
  205. "width": 200,
  206. "height": 100,
  207. "zIndex": 10,
  208. "connector": "smooth",
  209. "data": {
  210. "type": "tm.Flow",
  211. "name": "Web Traffic\n",
  212. "description": "",
  213. "outOfScope": false,
  214. "reasonOutOfScope": "",
  215. "hasOpenThreats": false,
  216. "isBidirectional": true,
  217. "isEncrypted": false,
  218. "isPublicNetwork": false,
  219. "protocol": "",
  220. "threats": []
  221. },
  222. "id": "8ce4fe50-f0f7-448c-9945-2f8c85079374",
  223. "labels": [
  224. "Web Traffic\n"
  225. ],
  226. "source": {
  227. "cell": "97f211c4-cd4b-411e-8479-e60cf7ff21c6"
  228. },
  229. "target": {
  230. "cell": "9eb5724a-c842-41c7-b1f2-1b695d8ac41c"
  231. }
  232. },
  233. {
  234. "position": {
  235. "x": 290,
  236. "y": 210
  237. },
  238. "size": {
  239. "width": 140,
  240. "height": 130
  241. },
  242. "attrs": {
  243. "text": {
  244. "text": "Web Client"
  245. },
  246. "body": {
  247. "stroke": "#333333",
  248. "strokeWidth": 1.5,
  249. "strokeDasharray": null
  250. }
  251. },
  252. "visible": true,
  253. "shape": "process",
  254. "zIndex": 11,
  255. "id": "9eb5724a-c842-41c7-b1f2-1b695d8ac41c",
  256. "data": {
  257. "type": "tm.Process",
  258. "name": "Web Client",
  259. "description": "",
  260. "outOfScope": false,
  261. "reasonOutOfScope": "",
  262. "hasOpenThreats": false,
  263. "handlesCardPayment": false,
  264. "handlesGoodsOrServices": false,
  265. "isWebApplication": false,
  266. "privilegeLevel": "",
  267. "threats": []
  268. }
  269. },
  270. {
  271. "position": {
  272. "x": 770,
  273. "y": 245
  274. },
  275. "size": {
  276. "width": 120,
  277. "height": 60
  278. },
  279. "attrs": {
  280. "text": {
  281. "text": "PostgreSQL"
  282. },
  283. "topLine": {
  284. "strokeWidth": 1.5,
  285. "strokeDasharray": null
  286. },
  287. "bottomLine": {
  288. "strokeWidth": 1.5,
  289. "strokeDasharray": null
  290. }
  291. },
  292. "visible": true,
  293. "shape": "store",
  294. "zIndex": 12,
  295. "id": "f3b93565-510d-4b23-9726-2e0e233e7e2c",
  296. "data": {
  297. "type": "tm.Store",
  298. "name": "PostgreSQL",
  299. "description": "",
  300. "outOfScope": false,
  301. "reasonOutOfScope": "",
  302. "hasOpenThreats": false,
  303. "isALog": false,
  304. "isEncrypted": false,
  305. "isSigned": false,
  306. "storesCredentials": false,
  307. "storesInventory": false,
  308. "threats": []
  309. }
  310. },
  311. {
  312. "position": {
  313. "x": 358.75,
  314. "y": -100
  315. },
  316. "size": {
  317. "width": 112.5,
  318. "height": 60
  319. },
  320. "attrs": {
  321. "text": {
  322. "text": "Level 0 DFD"
  323. }
  324. },
  325. "visible": true,
  326. "shape": "td-text-block",
  327. "zIndex": 16,
  328. "id": "b2cdbfd5-8d17-42a2-94a1-5cd7d4f42712",
  329. "data": {
  330. "type": "tm.Text",
  331. "name": "Level 0 DFD",
  332. "hasOpenThreats": false
  333. }
  334. },
  335. {
  336. "position": {
  337. "x": 456.25,
  338. "y": 210
  339. },
  340. "size": {
  341. "width": 240,
  342. "height": 130
  343. },
  344. "attrs": {
  345. "text": {
  346. "text": ""
  347. },
  348. "body": {
  349. "stroke": "#333333",
  350. "strokeWidth": 1.5,
  351. "strokeDasharray": null
  352. }
  353. },
  354. "visible": true,
  355. "shape": "process",
  356. "zIndex": 19,
  357. "id": "9eb0fd2c-b84a-43bd-be3e-3a8bc02bd2d1",
  358. "data": {
  359. "type": "tm.Process",
  360. "name": "",
  361. "description": "",
  362. "outOfScope": false,
  363. "reasonOutOfScope": "",
  364. "hasOpenThreats": false,
  365. "handlesCardPayment": false,
  366. "handlesGoodsOrServices": false,
  367. "isWebApplication": false,
  368. "privilegeLevel": "",
  369. "threats": []
  370. }
  371. }
  372. ],
  373. "description": "DFD-based threat model, grouping multiple processes"
  374. }
  375. ],
  376. "diagramTop": 4,
  377. "reviewer": "Sr. Security Engineer",
  378. "threatTop": 12
  379. }
  380. }
Add Comment
Please, Sign In to add comment