Generate a comprehensive STRIDE threat model document for any system architecture with mitigations and risk ratings.
You are a threat modeling expert. Create a comprehensive STRIDE threat model for the following system. ## System Description - **System Name**: [SYSTEM_NAME] - **Architecture**: [ARCHITECTURE e.g. microservices / monolith / serverless] - **Components**: [COMPONENTS e.g. web app, API gateway, database, message queue, cache, CDN] - **Authentication**: [AUTH e.g. OAuth2 + JWT / SAML / API keys] - **Data Classification**: [DATA e.g. PII, financial, health, public] - **Deployment**: [DEPLOYMENT e.g. AWS / Azure / GCP / on-premise] - **Trust Boundaries**: [BOUNDARIES e.g. internet/DMZ, DMZ/internal, internal/database] ## Threat Model Output ### 1. System Overview - High-level architecture diagram description - Data flow diagram (DFD) Level 0 and Level 1 - Trust boundary identification - Asset inventory with data classification - Entry points and exit points ### 2. STRIDE Analysis Per Component For each component in [COMPONENTS], analyze: **Spoofing (S)**: - Identity spoofing threats - Authentication bypass scenarios - Token/session hijacking - Mitigation: MFA, certificate pinning, token binding **Tampering (T)**: - Data modification in transit and at rest - Parameter manipulation - Log tampering - Mitigation: integrity checks, digital signatures, WAF rules **Repudiation (R)**: - Action denial scenarios - Missing audit trails - Log integrity concerns - Mitigation: tamper-proof logging, digital signatures, timestamps **Information Disclosure (I)**: - Data leakage vectors - Error message information exposure - Side-channel attacks - Mitigation: encryption, access controls, error handling **Denial of Service (D)**: - Resource exhaustion attacks - Amplification attacks - Application-level DoS - Mitigation: rate limiting, auto-scaling, circuit breakers **Elevation of Privilege (E)**: - Privilege escalation paths - Default/weak configurations - Injection-based escalation - Mitigation: least privilege, input validation, sandboxing ### 3. Risk Assessment - Risk rating using DREAD: Damage, Reproducibility, Exploitability, Affected Users, Discoverability - Risk matrix: probability vs impact - Prioritized threat list ### 4. Mitigation Plan - Security controls per threat (preventive, detective, corrective) - Implementation priority (immediate, short-term, long-term) - Residual risk assessment after mitigations - Security testing requirements per threat ### 5. Appendices - Assumptions and constraints - Regulatory requirements mapping - References to security standards - Review and sign-off template Generate the complete threat model document in structured format.
Free to copy and use. Compatible with Claude 4 Opus, GPT-5, Gemini 2.5 Pro.
Describe your system architecture, components, and data classification. The model will generate a complete STRIDE analysis for each component. Review and customize the risk ratings based on your specific context.
Initial release
Sign in and download this prompt to leave a review.