Skip to content

Threat Modeling Template

This template will help you use STRIDE and DREAD to identify and prioritize potential threats to your application. This activity should be completed as a team during the initial development process and reviewed regularly throughout.

SJ Threat Model Template

Threat Modeling is the process of identifying risks to a system. This includes defining potential threats, identifying issues that could arise from these threats, and developing mitigation strategies.  

Threat modeling is a practical approach to analyzing the design of a feature, application, or product to eliminate potential security flaws. The primary goal of threat modeling is to understand the risks before developing a system.   

You can use a threat modeling template to identify potential threats to your product. Start by using the STRIDE model to list all the threats. Next, use the DREAD model to assign a number to each threat.

Here are some threat modeling resources to help you accomplish your application security goals: