STRIDE Threat Modeling Threat model a system in a structured workshop format. 1. Model the System Draw the diagram: processes, data stores, data flows, external actors, and trust boundaries (dashed lines where privilege/context changes). - Every element numbered; technologies noted on processes/stores - Include the boring parts: auth flows, async jobs, admin tooling, backups 2. Enumerate with STRIDE For each element, apply the applicable categories: | Category | Applies To | Question | |---|---|---| | S poofing | Processes, actors | Can someone pretend to be this? (auth) | | T ampering | Flow…