ThreatModel
cluster_internet
Internet
cluster_dmz
DMZ
cluster_gateway_zone
Gateway_Zone
cluster_intranet
Intranet
cluster_command_zone
Command_Zone
External Client 1
π€ External Client 1
External Firewall
π₯ External Firewall
External Client 1->External Firewall
test1
Protocol: HTTPS
Data: Web Traffic
π Encrypted
External Client 2
π€ External Client 2
External Client 2->External Firewall
test
Protocol: HTTP
Data: Web Traffic
External Client 3
π€ External Client 3
External Client 3->External Firewall
Client 3 to External Firewall
Protocol: FTP
Data: File Transfer
External Client 4
π€ External Client 4
External Client 4->External Firewall
Client 4 to External Firewall
Protocol: SFTP
Data: File Transfer
π Encrypted
External Client 5
π€ External Client 5
External Client 5->External Firewall
Client 5 to External Firewall
Protocol: DNS
Data: DNS Query
External Client 6
π€ External Client 6
External Client 6->External Firewall
Client 6 to External Firewall
Protocol: SMTP
Data: Mail Traffic
External Client 7
π€ External Client 7
External Client 7->External Firewall
Client 7 to External Firewall
Protocol: RTSP
Data: Video Stream
External Client 8
π€ External Client 8
External Client 8->External Firewall
Client 8 to External Firewall
Protocol: MQTT
Data: IoT Data
Protocol Break Device
π₯οΈ Protocol Break Device
External Firewall->Protocol Break Device
External Firewall to Protocol Break Device
Protocol: HTTPS
Data: Web Traffic
π Encrypted
Internal Firewall
π₯ Internal Firewall
Protocol Break Device->Internal Firewall
Protocol Break Device to Internal Firewall
Protocol: HTTPS
Data: Web Traffic
π Encrypted
Gateway Load Balancer
π₯οΈ Gateway Load Balancer
Internal Firewall->Gateway Load Balancer
Internal Firewall to Gateway Load Balancer
Protocol: HTTPS
Data: Web Traffic
π Encrypted
Switch
π Switch
Internal Firewall->Switch
Internal Firewall to Switch
Protocol: Ethernet
Data: General Traffic
App Server 1
π₯οΈ App Server 1
Gateway Load Balancer->App Server 1
Gateway Load Balancer to App Server 1
Protocol: HTTPS
Data: API Request
π Encrypted
App Server 2
π₯οΈ App Server 2
Gateway Load Balancer->App Server 2
Gateway Load Balancer to App Server 2
Protocol: HTTPS
Data: API Request
π Encrypted
App Server 3
π₯οΈ App Server 3
Gateway Load Balancer->App Server 3
Gateway Load Balancer to App Server 3
Protocol: HTTPS
Data: API Request
π Encrypted
App Server 1->Switch
App Server 1 to Switch
Protocol: Ethernet
Data: General Traffic
App Server 2->Switch
App Server 2 to Switch
Protocol: Ethernet
Data: General Traffic
App Server 3->Switch
App Server 3 to Switch
Protocol: Ethernet
Data: General Traffic
Internal Operator 1
π€ Internal Operator 1
Internal Operator 1->Switch
Internal Operator 1 to Switch
Protocol: Ethernet
Data: General Traffic
Internal Operator 2
π€ Internal Operator 2
Internal Operator 2->Switch
Internal Operator 2 to Switch
Protocol: Ethernet
Data: General Traffic
System Administrator
π€ System Administrator
System Administrator->Switch
System Administrator to Switch
Protocol: Ethernet
Data: General Traffic
Central Server
π₯οΈ Central Server
System Administrator->Central Server
System Administrator to Central Server
Protocol: SSH
Data: SSH Traffic
π Encrypted
π Authenticated
Authentication Server
π₯οΈ Authentication Server
System Administrator->Authentication Server
System Administrator to Authentication Server
Protocol: LDAPS
Data: Authentication Request
π Encrypted
π Authenticated
Switch->Central Server
Switch to Central Server
Protocol: HTTPS
Data: Server Request
π Encrypted
π Authenticated
βοΈ Bidirectional
Central Server->Authentication Server
Central Server to Authentication Server
Protocol: LDAPS
Data: Authentication Request
π Encrypted
π Authenticated
Application Database
ποΈ Application Database
Command Machine
π₯οΈ Command Machine
Command Machine->Switch
Command Machine to Switch
Protocol: Ethernet
Data: General Traffic
+
-
LΓ©gende
π€ Acteur
π₯ Firewall
π₯οΈ Serveur
ποΈ Database
Trust Boundaries
Untrust Boundaries
Protocoles:
HTTP
HTTPS
FTP
SFTP
DNS
SMTP
RTSP
MQTT
Ethernet
SSH
LDAPS