INTERNSHIP - Threat modeling library for Televic GSP

Topic

Threat modeling is a process by which potential threats or the absence of appropriate safeguards, can be identified and enumerated, and countermeasures prioritized.

A lot of tools exist and many have features which could be interesting to use in Televic GSP.

However, designing a threat model, identifying and prioritizing potential threats remains time consuming. Using the specific context of Televic GSP, i.e. software runs on the trainside or wayside, and the specific software stacks, this could be optimized.

Potential master thesis:

Design and implement a common Televic-GSP-specific potential threats library. This libary allows to:

* Maximize the number of useful potential threat suggestions.

* Minimize the number of false positive threat suggestions.

* Identify common security patterns.

* Provide risk analysis guidelines for each of the threat suggestions.

Potential internship:

Implement and integrate the threat modeling tool into a product-based security dashboard:

* Linking a version of the threat model to a version of the software.

* Generate Jira tickets based on the threat suggestions.

* Follow status of Jira tickets related to security problems and indicate those in the threat model.

* Generate security reports which could be sent to customers.

If you are interested in this topic, please also register this on the Televic website at: https://www.televic.com/en/careers/internships-and-students so we can confirm the topic is still available.