Module
Threat Modeling Methods
Sign in to add this module to your path and practice.
About
Assets, adversaries, attack surfaces; STRIDE, DREAD, attack trees, data-flow diagrams with trust boundaries. Practice on familiar systems (web apps, OS processes, network services).
Goal
Apply STRIDE (or equivalent) to a data-flow diagram of a multi-tier application and produce a prioritized list of threats with candidate controls.
Unlocks
Tutor
Ask questions about this module.
Hi — I'm your tutor for Threat Modeling Methods. Ask about the concepts, goal, or where you're stuck.