SecurityPragmatic Threat Modeling: STRIDE on a DFD in 60 Minutes
A threat model does not need to be a 50-page document. A 60-minute session with a level-1 DFD, STRIDE and a risk register is enough to avoid the design flaws that show up repeatedly in audits and pentests.