Threat Modeling

Threat modeling is an engineering technique you can use to help you identify threats, attacks, vulnerabilities, and countermeasures that could affect your application. You can use threat modeling to shape your application's design, meet your company's security objectives, and reduce risk.

Getting Started

• At a Glance: Threat Modeling
• Cheat Sheet: Threat Modeling Web Applications
• Chapter 4 - Threat Modeling

Terminology

• Cheat Sheet: Threat Modeling Terms

How Tos

• How To: Create a Threat Model for a Web Application at Design Time

Templates

• Template: Web Application Threat Model
• Template Example: Web Application Threat Model

Walkthroughs

• Walkthrough: Creating a Threat Model for a Web Application