Question

A software security team is beginning a threat modeling exercise for a new customer-facing web application still in the design phase. The lead architect wants a structured methodology that systematically enumerates threats by category — such as spoofing, tampering, and information disclosure — mapped against the data flows and trust boundaries in the system design. Which threat modeling approach best fits this requirement?

Accepted Answer

STRIDE, a threat-classification model that categorizes threats against system components and data flows

Answer

DREAD, a scoring model used to rank the severity of already-identified threats

Answer

FAIR, a quantitative framework for expressing risk in financial loss terms

Answer

OCTAVE, an organizational, asset-driven risk assessment methodology