04.6.3 · Skill in Security and privacy engineering
Threat modeling
Thinking through how a system could be attacked before building it.
Threat modeling asks what we are building, what can go wrong, and what we will do about it. A short session during design catches problems that are expensive to fix later. It scales from a whiteboard sketch to a formal review.
Resources
1- docsStart hereThreat modeling cheat sheet ↗OWASP · 13 min
A lightweight way to ask what could go wrong with a design, using the STRIDE categories.
Tools
none yetTools for this topic are being researched.