Dictionary · Hacking Techniques and Methodologies
Threat Modeling
Method · Intermediate
A structured way to ask what can go wrong with a system, who might cause it, and which controls should exist. STRIDE is one public set of categories used in that conversation.
You list the assets, the trust boundaries, and the abuse cases while a change is still cheap. It is a design meeting, not a scan.
Example: Before launch, a team notes that a new admin API could be called by the wrong account and adds authentication and authorization checks.
Common misconception
- It is not a product you install. It is a repeatable design practice.