A Threat modeling approach to analyze and mitigate WhatsApp attacks: A Review

One of the most popularly used features on smart-phones is WhatsApp. It is a free messaging app available for An-droid, IOS, and all other smartphones. A WhatsApp vulnerability is a hole or a weakness in the app, which can be a design flaw or an implementation bug. Through bug, an attacker can enter into the app and cause harm to the database of an application. A database contains private information like backup files, chatting information, contacts, etc. The most dangerous vulnerability in WhatsApp are Authentication, Account Hijacking, and Message Manipulation. In these vulnerabilities, an attacker can manip-ulate the message but not hijack the entire account. There are some basic requirements for a secure and privacy-preserving chat service, database backup, encrypted database, etc. The awareness about the vulnerability of WhatsApp and its security settings in new versions of WhatsApp. Use WhatsApp security features and secure the services of the application. This paper aims to be aware of the risks and vulnerabilities of WhatsApp and use the Threat modeling method to mitigate its vulnerability. It used threat Modelling steps to help organizations to quantify risks and vulnerabilities, ensuring those that need the most attention and resources do so to minimize their attack surface in a purposeful way.