Threat modeling
Systematically asking what could go wrong with a system, and for whom, before or while it's built.
Learn it through a story
- Shift Left, or Get Left Behind (Cybersecurity for Juniors 3, Ch 2)
Related terms
- Specialisation Deep focus in one particular area, usually built on a broader foundation.
- Spoofing Faking a caller ID, sender name or address so it looks like it comes from somewhere trustworthy.
- STRIDE A six-question framework (Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege) for threat modeling.
- Threat modelling Asking in advance who could misuse something and what the worst outcome could be.
- Three two one rule Keep three copies, on two kinds of storage, with one copy kept somewhere else.
- TLS certificate A credential proving a server's identity and enabling encrypted connections.