This post is about how to perform Threat Modelling using the STRIDE model. I'll also highlight some tips with using OWASP Threat Dragon, and some practices I choose to follow.




What is Threat Modelling


Threat modelling is a critical part of a secure development lifecycle. We use a model, such as STRIDE, to help us identify, review and...