thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Intermediate

Threat Modeling

Structured process of identifying threats, attack paths, and mitigations for a system during design.

Definition

Threat modeling answers what are we building, what can go wrong, what are we going to do about it, and did we do a good job. Methodologies include STRIDE (spoofing, tampering, repudiation, information disclosure, denial of service, elevation of privilege), PASTA, and attack trees. It is most effective early in the design phase.

Example

A team draws a data flow diagram of a new API, marks trust boundaries, and applies STRIDE to each element.

Exam tip

Map STRIDE to properties: spoofing-authentication, tampering-integrity, repudiation-non-repudiation, disclosure-confidentiality, DoS-availability, EoP-authorization.

Related terms