Threat Modeling (OWASP and STRIDE)

1. Threat Modeling Cheat Sheet

   Four-question framework, data flow diagrams, STRIDE and mitigation tracking.

2. OWASP Threat Modeling

   Overview of threat modeling and its benefits.

3. Threat Modeling Process

   Decomposing the application, ranking threats and determining countermeasures.

4. Attack Surface Analysis

   Mapping entry points and attack surface.

5. Abuse Case

   Writing abuse cases alongside user stories.

6. Secure Product Design

   Design principles such as least privilege and fail securely.

7. Microsoft STRIDE Threats

   Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege.

8. Microsoft Threat Modeling Tool

   Overview of the Microsoft Threat Modeling Tool.

9. Threat Modeling Tool Mitigations

   Mitigation guidance for identified threats.

10. Threat Modeling Tool Getting Started

    Creating models and diagrams.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.