Threat Modeling

高级security最低上下文：64K

Performs systematic threat modeling for software systems using frameworks like STRIDE, PASTA, and Attack Trees. Identifies potential security threats, attack vectors, and vulnerabilities in system architectures. Produces prioritized risk assessments with mitigation strategies and security controls.

threat-modelingstridesecurityrisk-assessmentattack-surfacearchitecture

使用场景

  • STRIDE analysis of microservices architectures
  • Identifying attack surfaces in API designs
  • Creating data flow diagrams with trust boundaries
  • Prioritizing security risks by impact and likelihood
  • Generating mitigation strategies mapped to security controls

示例提示词

Perform a threat model for the following system architecture.

System: E-commerce platform with microservices
Components:
- React frontend (CDN-hosted)
- API Gateway (Kong)
- Auth Service (JWT + OAuth2)
- Order Service
- Payment Service (integrates with Stripe)
- PostgreSQL database
- Redis cache
- S3 for file storage
- Message queue (RabbitMQ)

Please provide:
1. Data flow diagram description with trust boundaries
2. STRIDE analysis for each component
3. Top 10 threats ranked by risk (impact × likelihood)
4. Attack trees for the top 3 threats
5. Mitigation strategies with specific security controls
6. Residual risk after mitigations
7. Recommended security testing priorities

推荐模型

claude-opus-4-6gpt-5gemini-2-5-pro

兼容工具

claude-codecursorkiroany

模态

输入: text, image
→
输出: text

相关 Skills

security-auditsystem-design

作者

OpenModels Community

@openmodelsrun