SkillCybersecurity Engineer
Library · practice
Threat modelling
Find security design flaws before they are built: diagram the system, ask what can go wrong with a method like STRIDE, and decide how to handle each threat.
Threat modelling appeared in 26% of the Cybersecurity Engineer job descriptions we read, and it is the cheapest security activity there is, because it catches flaws on a whiteboard instead of in production.
This shelf is method, not code: a repeatable way to reason about a design, illustrated with a worked model of a small web application.
Beginner lessons for Threat modelling are being written.
Advanced lessons for Threat modelling are being written.