Skip to content

Threat modeling

Data-flow diagrams, STRIDE per element, and turning threats into controls.

Tool: STRIDE worksheet

STRIDE threat modeling, with a worked example
How to apply STRIDE per element to a data-flow diagram, with a worked example of a document upload service and candidate NIST SP 800-53 controls for each threat.