A first threat list
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
write a short, useful list of threats.
Planned topics
- List assets (what is valuable), entry points (where input arrives), and threats (what could go wrong).
- Use a simple prompt such as STRIDE (spoofing, tampering, repudiation, information disclosure, denial of service, elevation of privilege). Name it only; deeper modeling comes later.
- For each threat write one planned control.
- Rank by likelihood and impact; start with the top ten.
- Security is designed in from the start, not a final checklist.
Draft outline details
Demonstration
a table row: "Customer reads another's order" / entry: GET /orders/{id} / control: ownership check.
Check your understanding
What is one planned control for "guessing order IDs"?
Show answer
An ownership check on every lookup.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.