Threat modeling with STRIDE

Objective

Learn to ask yourself, before writing the code, the four questions of threat modeling: what are we building? what can go wrong? what are we going to do about it? did we do a good job? You will be able to draw a system (assets, flows, trust boundaries), apply the six STRIDE categories to it, choose mitigations and prioritize them.