Topic: threat-modelling

• Threat modelling a feature with STRIDE in one working session

  Draw the feature as a data-flow diagram with trust boundaries, walk every element through the six STRIDE categories, decide per threat whether to mitigate, eliminate, transfer or accept, and write the outcome down as testable requirements; the Threat Modeling Manifesto's four questions are the agenda.

  methodology · en · unreviewed

Machine-readable: JSON