3 docs tagged with "DFD"

The LINDDUN methodology for privacy threat modelling — the seven threat categories, mapping to data flow diagrams and application to any system with personal or regulated data, at all levels. It complements security threat modelling (STRIDE); it does not replace the legal compliance assessment.

Complete example with DFD, STRIDE and mitigation in an authentication service with JWT

Canonical catalogue of threat modelling requirements (THR-001 to THR-007), with applicability by risk level and acceptance criteria for threat identification, formal disposition, requirement derivation and methodological traceability.