Demo: drawing Shop's trust boundaries
On This Lesson 3 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
draw the data flow and extract a threat list. Prepares JNR-035-LAB1.
Draft outline details
Step by step
- Sketch actors: anonymous visitor, customer, admin.
- Add Shop API, database, and the payment provider; draw boundary lines.
- Label each flow with the data it carries (credentials, orders, card tokens).
- Planned mistake: drawing the browser inside the trusted zone. Fix: move the boundary so the browser is outside.
- For each boundary crossing, write one threat and one control.
- Save the diagram and list in the repo as the seed for the security controls document.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.