Risk Assessment for the Typical E-Commerce Web Application - Secure Java: For Web Application Development - page 119

table 6.3 ( continued ) threat Proiles for Panthera's e-Commerce Application

Threat
Access

Threat
Description

Threat
Motive

Threat
Outcome

Asset Name Threat Actor

Customer
information
(customer
order
information)

Application
administrative
user

Disgruntled
employee in
the
organization
might modify
or destroy
customer
order numbers
and cause a
great deal of
operational
hindrance to
Panthera

Deliberate Loss of

integrity and
availability of
customer
order
information

Inventory
information

Attacker
(external)

Attacker may
gain access to
the
administrative
interface of the
application to
modify or
destroy
inventory
information

Deliberate Loss of

integrity and
availability of
inventory
information

Gift card
information

Application
administrative
user

Application
administrative
user having
access to gift
card
information
might use the
information for
his/her own
beneit and
cause heavy
inancial losses
for Panthera

Deliberate Loss of

conidentiality