Threat Modeling

Threat Modeling

Threat Modeling is the process to identify, understand, and communicate threats and mitigations.^[1]
- STRIDE is a mnemonic initially created to help developers identify threats to their applications
- PASTA is a risk-centric methodology^[2] with seven distinct steps
Requires constant review to ensure validity

Metadata

Sources

Threat model - Wikipedia

Tags

Threat Modeling | OWASP Foundation ↩︎
e.g., aligned to an organizations specific risks ↩︎