7 docs tagged with "STRIDE"

Structured identification, analysis and mitigation of threats during the development lifecycle

How to link identified threats to the formal requirements defined in Chapter 2

Combining get_threat_landscape + consult_security_requirements by concern to produce grounded threat models.

Complete example with DFD, STRIDE and mitigation in an authentication service with JWT

Practical comparison of recommended approaches and tools

Organisational policy that defines the mandatory nature, methodology, execution triggers, formal approval requirements, traceability and management of threat modelling artefacts throughout the lifecycle of applications classified L2 and L3.

Canonical catalogue of threat modelling requirements (THR-001 to THR-007), with applicability by risk level and acceptance criteria for threat identification, formal disposition, requirement derivation and methodological traceability.