标题： CryptoNeo威胁建模框架（CNTMF）：在集成区块链生态系统中保护新银行和金融科技 显示英文标题

标题： The CryptoNeo Threat Modelling Framework (CNTMF): Securing Neobanks and Fintech in Integrated Blockchain Ecosystems

摘要： 区块链、加密货币和Web3技术在数字银行和金融科技运营中的快速整合，创造了一个将传统金融系统与去中心化元素相结合的集成环境。 本文介绍了CryptoNeo威胁建模框架（CNTMF），这是一个旨在解决这些生态系统中风险的建议框架，例如预言机操控和跨链攻击。 CNTMF代表了对STRIDE、OWASP Top 10、NIST框架、LINDDUN和PASTA等现有方法论的提议扩展，同时结合了定制组件，包括混合层分析、用于加密货币特定风险的CRYPTOQ记忆法，以及人工智能增强的反馈循环。 基于2025年事件的真实数据，CNTMF支持数据驱动的缓解措施，以减少损失，这些损失在2025年上半年的344起安全事件中总计约为24.7亿美元（CertiK通过GlobeNewswire，2025；Infosecurity Magazine，2025）。 其阶段指导资产映射、风险概况、优先级排序、缓解和迭代反馈。 这有助于应对如国家支持的攻击等不断演变的风险。 显示英文摘要

摘要： The rapid integration of blockchain, cryptocurrency, and Web3 technologies into digital banks and fintech operations has created an integrated environment blending traditional financial systems with decentralised elements. This paper introduces the CryptoNeo Threat Modelling Framework (CNTMF), a proposed framework designed to address the risks in these ecosystems, such as oracle manipulation and cross-chain exploits. CNTMF represents a proposed extension of established methodologies like STRIDE, OWASP Top 10, NIST frameworks, LINDDUN, and PASTA, while incorporating tailored components including Hybrid Layer Analysis, the CRYPTOQ mnemonic for cryptocurrency-specific risks, and an AI-Augmented Feedback Loop. Drawing on real-world data from 2025 incidents, CNTMF supports data-driven mitigation to reduce losses, which totalled approximately $2.47 billion in the first half of 2025 across 344 security events (CertiK via GlobeNewswire, 2025; Infosecurity Magazine, 2025). Its phases guide asset mapping, risk profiling, prioritisation, mitigation, and iterative feedback. This supports security against evolving risks like state-sponsored attacks.