Threat Modeling

İlerisecurityEn az 64K bağlam

Performs systematic threat modeling for software systems using frameworks like STRIDE, PASTA, and Attack Trees. Identifies potential security threats, attack vectors, and vulnerabilities in system architectures. Produces prioritized risk assessments with mitigation strategies and security controls.

threat-modelingstridesecurityrisk-assessmentattack-surfacearchitecture

Kullanım alanları

  • STRIDE analysis of microservices architectures
  • Identifying attack surfaces in API designs
  • Creating data flow diagrams with trust boundaries
  • Prioritizing security risks by impact and likelihood
  • Generating mitigation strategies mapped to security controls

Örnek prompt

Perform a threat model for the following system architecture.

System: E-commerce platform with microservices
Components:
- React frontend (CDN-hosted)
- API Gateway (Kong)
- Auth Service (JWT + OAuth2)
- Order Service
- Payment Service (integrates with Stripe)
- PostgreSQL database
- Redis cache
- S3 for file storage
- Message queue (RabbitMQ)

Please provide:
1. Data flow diagram description with trust boundaries
2. STRIDE analysis for each component
3. Top 10 threats ranked by risk (impact × likelihood)
4. Attack trees for the top 3 threats
5. Mitigation strategies with specific security controls
6. Residual risk after mitigations
7. Recommended security testing priorities

Önerilen modeller

claude-opus-4-6gpt-5gemini-2-5-pro

Uyumlu araçlar

claude-codecursorkiroany

Modaliteler

Giriş: text, image
→
Çıkış: text

İlgili Skills

security-auditsystem-design

Yazar

OpenModels Community

@openmodelsrun