Threat Modeling

AvanzadasecurityContexto mínimo: 64K

Performs systematic threat modeling for software systems using frameworks like STRIDE, PASTA, and Attack Trees. Identifies potential security threats, attack vectors, and vulnerabilities in system architectures. Produces prioritized risk assessments with mitigation strategies and security controls.

threat-modelingstridesecurityrisk-assessmentattack-surfacearchitecture

Casos de uso

  • STRIDE analysis of microservices architectures
  • Identifying attack surfaces in API designs
  • Creating data flow diagrams with trust boundaries
  • Prioritizing security risks by impact and likelihood
  • Generating mitigation strategies mapped to security controls

Prompt de ejemplo

Perform a threat model for the following system architecture.

System: E-commerce platform with microservices
Components:
- React frontend (CDN-hosted)
- API Gateway (Kong)
- Auth Service (JWT + OAuth2)
- Order Service
- Payment Service (integrates with Stripe)
- PostgreSQL database
- Redis cache
- S3 for file storage
- Message queue (RabbitMQ)

Please provide:
1. Data flow diagram description with trust boundaries
2. STRIDE analysis for each component
3. Top 10 threats ranked by risk (impact × likelihood)
4. Attack trees for the top 3 threats
5. Mitigation strategies with specific security controls
6. Residual risk after mitigations
7. Recommended security testing priorities

Modelos recomendados

claude-opus-4-6gpt-5gemini-2-5-pro

Herramientas compatibles

claude-codecursorkiroany

Modalidades

Entrada: text, image
→
Salida: text

Skills relacionadas

security-auditsystem-design

Autor

OpenModels Community

@openmodelsrun
Threat Modeling — AI Agent Skill | OpenModels