Threat Modeling

Threat modeling workflow for software systems: scope, data flow diagrams, STRIDE analysis, risk scoring, and turning mitigations into backlog and tests

ulpi-io 37c09fc 5 files · 6.3 KB Updated

File contents

Threat Modeling (STRIDE)

Outputs (Definition of Done)

Produce a data flow diagram, a threat register, and a mitigation plan that becomes tickets and tests.

Load Next (References)

  • references/stride-workshop.md — step-by-step workshop agenda + DFD guidance
  • references/common-threats-and-mitigations.md — threat catalog with mitigations
  • references/templates.md — copy/paste templates for docs and tickets

ulpi-io/plugin-marketplace/tree/main/plugins/bobmatnyc/skills/threat-modeling commit 37c09fc4b4

Frequently asked questions

npx skillmds@latest add ulpi-io/threat-modeling