PASTA Threat Modelling for Real Banking Systems: The Add-Beneficiary & Fund-Transfer Walkthrough
A 7-stage PASTA threat model walkthrough on the add-beneficiary + fund-transfer flow used by every Indian retail bank — DFD, STRIDE catalog, attack tree, risk matrix, and SEBI/RBI/DPDP control mapping for AppSec teams.
7
PASTA stages in the methodology
~60%
BFSI fraud via beneficiary abuse
₹14L
Median Indian breach cost
6h
CERT-In reporting clock