IdentifyApplied practice

Threat model canvas

Lay out a data-flow of processes, stores and external entities across trust zones, and tag each element with its STRIDE threats.

How to use it
  1. Add each element and pick its kind: process, store or external entity.
  2. Give it a trust zone; distinct zones draw the boundaries between them.
  3. Tick the STRIDE threats that apply; the count shows on the element.
  4. Export the canvas to brief a design review.

This tool reinforces threat modelling as design. Your work autosaves to this browser. Use the download buttons on the figure for PNG and PowerPoint.