Threat Modeling

STRIDE, DREAD, attack trees, and threat modeling methodologies.

Overview

Threat modeling identifies and prioritizes security threats.

STRIDE Model

Category	Description	Example
Spoofing	Identity impersonation	Fake login
Tampering	Data modification	Man-in-the-middle
Repudiation	Denying actions	Log deletion
Information Disclosure	Data exposure	SQL injection
Denial of Service	Availability loss	DDoS
Elevation of Privilege	Unauthorized access	Privilege escalation

DREAD Rating

Architecture Diagram

D - Damage potential
R - Reproducibility
E - Exploitability
A - Affected users
D - Discoverability

Score 1-10 for each:
High: 8-10
Medium: 4-7
Low: 1-3

Attack Tree

Architecture Diagram

Goal: Steal customer data
├── Compromise database
│   ├── SQL injection
│   ├── Credential theft
│   └── Backup exposure
├── Intercept network traffic
│   ├── Man-in-the-middle
│   └── Packet sniffing
└── Social engineering
    ├── Phishing
    └── Pretexting

Threat Model Process

Architecture Diagram

1. Define scope → Systems, data
2. Identify assets → What to protect
3. Create diagram → Data flows
4. Identify threats → STRIDE
5. Rate threats → DREAD
6. Mitigate → Controls
7. Validate → Verify

Data Flow Diagram

Architecture Diagram

┌──────────┐     ┌──────────┐
│  User    │────→│  Web App │
└──────────┘     └────┬─────┘
                      │
                 ┌────▼─────┐
                 │ Database │
                 └──────────┘

Practice

Conduct threat modeling for a web application using STRIDE.

Threat Modeling

Threat Modeling

Overview

STRIDE Model

DREAD Rating

Attack Tree

Threat Model Process

Data Flow Diagram

Practice

Need Expert Cybersecurity Help?