Implementación del modelado de amenazas para la optimización de procesos de aseguramiento de aplicaciones

Abstract

Banco Popular is a financial institution with a long history in the country, belonging to the AVAL group dedicated to providing financial services to individuals (natural and legal) and organizations, services such as savings accounts, loans, credit cards, CDT among others. The organization is responsible every day to improve the performance of their products, for this they seek to implement and develop multiple technologies to optimize these, in parallel they seek to ensure the assurance of each technology that is implemented or want to implement. To guarantee the assurance of applications and solutions it is necessary to establish a methodology that allows the organization to identify threats in advance and solve them in an effective way. For this reason, this document will provide a proposal to establish a methodology that guarantees a correct strategic plan for the assurance of applications and solutions. To guarantee the fulfillment of this purpose, we will have to address the company's problems, identifying the current situation and the different threat modeling methodologies, identify the stages of the software development life cycle, elaborate a proposal for the implementation of a specific threat modeling methodology and identify tools to complement the execution of the technique. As a result, the organization will be able to launch applications into production without any type of threat or vulnerability, improve communication and understanding between stakeholders involved in the projects, and reduce the costs and efforts associated with securing applications.