App Security Engineer Threat Modeling Flashcards

In a data flow diagram (DFD) used for threat modeling, what does a dashed line or boundary box typically represent?

Answer: A trust boundary

Trust boundaries mark where data crosses between zones of differing privilege, which is where threats concentrate.

Which STRIDE category is primarily mitigated by implementing strong authentication?

Answer: Spoofing

Spoofing is pretending to be someone or something else, so authentication is its primary countermeasure.

A web app lets users deny they submitted a funds transfer because no tamper-proof audit trail exists. Which STRIDE threat is this?

Answer: Repudiation

Repudiation occurs when users can deny actions due to missing non-repudiation controls like secure logging or digital signatures.

In the STRIDE-per-element approach, which threats generally apply to a data store element?

Answer: Tampering, Information Disclosure, Denial of Service, and Repudiation (if logs)

Data stores are subject to T, I, and D, plus R when the store holds audit logs.

When should threat modeling ideally be performed in the secure SDLC?

Answer: During the design phase and revisited as the design changes

Threat modeling is most cost-effective in design and should be updated as architecture evolves.

Which threat modeling methodology is a seven-stage, risk-centric process that aligns business objectives with technical threats?

Answer: PASTA

PASTA (Process for Attack Simulation and Threat Analysis) is a seven-stage risk-centric methodology.

An attacker modifies a hidden form field containing a product price before submission. Which STRIDE category best fits?

Answer: Tampering

Unauthorized modification of data in transit or in the client is tampering.