Threat Model of a Scenario Based on Trusted Platform Module 2.0 Specification

The Trusted Platform Module (TPM) is a device that can be used to enhance the security of web applications. However, the TPM has to be used in a proper manner in order to benefit from its security properties. A threat model will contribute towards developing a better understanding of how to use the TPM and serve as a reference for future work. In this paper, a web application scenario based on the TPM 2.0 specification is developed and the threat model is constructed using Microsoft’s security development lifecycle threat modelling tool. The threats to each element in the model are analysed and the appropriate mitigations are worked out.