Threat modeling is a security practice for the team to identify threats, attacks, and risks based on the existing architecture design, and also to mitigate these potential security risks. There are a few key points to clarify in threat modeling before we discuss them further:
- It's a team activity. It's not just the developer's job. It will be more effective with QA, operation, architect, and security team involvement.
- Threat modeling may be the only security practice that is not recommended to be done by automation. It's a team exercise.
- The purpose of threat modeling is not to offer a comprehensive threat list, but to identify high-risk threats with key modules such as authentication, authorization, purchases, ...
