Threat modelling
Model assets, trust boundaries and threats before coding.
What you will be able to do
- Draw data flows.
- Name assets and actors.
- Prioritise mitigations.
In plain English
Model assets, trust boundaries and threats before coding.
- Draw data flows.
- Name assets and actors.
- Prioritise mitigations.
asset: learner data
trust boundary: browser -> API
threat: session theft
mitigation: HttpOnly cookies + rotationYour turn
EasyExplain it back
Answer from memory: When should threat modelling happen?
TEXT · starter
Your answer…Check your understanding before moving on.
Knowledge checkQuestion 1
When should threat modelling happen?
Select an answer to continue
Study tools
Make it yours.
Keep a private note for this lesson, then turn the key ideas into flashcards you can revisit.
Sign in to save notes and flashcards.Both are private to your account and stay with your progress.
Sign inFinished reading?
Lock in what you just learned.
0%
Mark this lesson complete to save your place and move one step closer to the certificate.