Threat Modeling

Threat modeling is a structured process for identifying, quantifying, and addressing security threats to a system during the design phase. Common methodologies include STRIDE (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege) and PASTA.

The output is a prioritized list of threats with mitigating controls, informing security requirements and architecture decisions before code is written.