Threat Model

Threat modeling is a structured process for identifying, quantifying, and prioritizing threats to a system before building or changing it. Common frameworks include STRIDE (Spoofing, Tampering, Repudiation, Information Disclosure, DoS, Elevation of Privilege) and PASTA.

Threat modeling outputs a list of potential attacks and mitigations that inform security requirements and architecture decisions.