thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Threat Model Data Flow Diagram (DFD)

A diagram of processes, data stores, external entities, data flows and trust boundaries used as the basis for threat modeling.

Definition

DFDs used in threat modeling have five element types: external entity, process, data store, data flow and trust boundary. Threats are enumerated per element (for example with STRIDE per element) and especially where data crosses trust boundaries. Keeping the DFD current is part of design change management.

Example

A DFD shows the browser (external entity) sending credentials across the internet trust boundary to the login process.

Exam tip

Know the DFD element types; STRIDE threats are mapped to them (for example, data stores are subject to T, R, I and D).

Related terms