Threat modeling finds risks early.
Methodologies
- STRIDE: Microsoft approach
- PASTA: Risk-focused
- DREAD: Rating threats
- Attack treesSTRIDE Categories
- Spoofing
- Tampering
- Repudiation
- Info disclosure
- Denial of service
- Elevation of privilege