Threat modeling is a systematic was to figure out security of a product or service. This is achieved by various threats and vulnerabilities, gauging their probability and impact and finally devising the fixation techniques or mitigation techniques to prevent the threat from occurring.
Apptrusty provides Mobile app security threat modeling as a service. The threat model is designed as an outline or checklist of items that need to be documented, reviewed and discussed when developing a mobile application. Every mobile app development company creates their app based on different requirements which also means different threats. Based on our experience in the subject matter, we create a model which depicts all the touch points that can result in a data leakage. At high level, these are based on 2 types of threat vectors.
Data At Rest
Data In Transit