threat-modeling-techniques

The threat-modeling-techniques skill provides a systematic framework for identifying, analyzing, and mitigating security threats during system design and architecture phases. It addresses the challenge of proactively discovering potential attack vectors before implementation by applying structured methodologies such as STRIDE, attack trees, and risk assessment approaches. By guiding users through a defined five-stage process—Define, Identify, Assess, Mitigate, and Validate—it enables teams to integrate security considerations early in the development lifecycle rather than reacting to issues after deployment.

Key capabilities include structured threat enumeration using the STRIDE methodology, visual modeling of attack paths through attack trees, and quantitative risk evaluation with DREAD scoring. The skill supports creating and analyzing data flow diagrams, identifying threats across trust boundaries, evaluating risks based on severity and likelihood, and designing appropriate mitigation strategies. It also provides guidance for assessing third-party integrations, planning security testing strategies, documenting security design decisions, and aligning with compliance initiatives such as SOC 2 and ISO 27001. Reference materials are organized for specific STRIDE categories, attack trees, data flow diagrams, DREAD risk scoring, mitigation strategies, and supporting tools and processes.

This skill is intended for security engineers, software architects, developers, and compliance teams involved in system design and security reviews. It is particularly useful when designing new systems or features with security requirements, conducting architecture reviews, identifying attack scenarios, and training teams in proactive security thinking. Organizations seeking to strengthen their secure design practices or support formal compliance efforts can use this skill to standardize and document their threat modeling activities.