skills.rest
defconxt
defconxtCOMMUNITY
Explore all skills by this author →
GitHub

Security Architecture & Threat Modeling

Guide security architecture design with Zero Trust, STRIDE, and PASTA threat modeling.

Updated Aug 27, 2026
Search Tags:#threat modeling#security architecture#cloud security#zero trust#defense in depth#kubernetes security
One-click install
npx skills add https://github.com/defconxt/CIPHER --skill security-architecture-threat-modeling
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Security Architecture & Threat Modeling
Source: https://github.com/defconxt/CIPHER/tree/main/skills/security-architecture
Command: npx skills add https://github.com/defconxt/CIPHER --skill security-architecture-threat-modeling

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps you design secure systems by providing guidance on security architecture principles, threat modeling methodologies, and best practices for various environments like cloud and Kubernetes.

Core Features & Use Cases

  • Zero Trust Architecture: Understand and implement the principles of Zero Trust.
  • Defense-in-Depth: Layer security controls effectively across different network and application layers.
  • Threat Modeling: Apply methodologies like STRIDE and PASTA to identify and mitigate potential threats.
  • Use Case: When designing a new microservices application, use this Skill to identify potential attack vectors using STRIDE and define appropriate network segmentation and authentication controls.

Quick Start

Use the security-architecture skill to explain the core principles of Zero Trust Architecture.

Frequently Asked Questions about Security Architecture & Threat Modeling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is threat modeling and how does STRIDE help identify attack vectors?▼

Threat modeling systematically identifies potential security vulnerabilities. STRIDE categorizes threats like spoofing, tampering, and elevation of privilege to help map attack vectors and define mitigation controls during system design.

How do I implement Zero Trust architecture in cloud environments?▼

Implement Zero Trust architecture by enforcing strict identity verification and least privilege access. This Skill provides guidance on identity fabric design and network segmentation patterns to securely restrict lateral cloud resource movement.

What is the best way to design network segmentation for Kubernetes security?▼

Design Kubernetes security using defense-in-depth strategies. This involves applying layered network segmentation patterns and strict access controls to isolate microservices and prevent lateral movement within the cluster.

Can I use the PASTA methodology for threat modeling a new application?▼

Yes, PASTA can be used for threat modeling new applications. It provides a risk-centric approach to simulate attacks, identify potential threats, and define appropriate security architecture controls for your system.

When do I need a security design review checklist for microservices?▼

You need a security design review checklist when designing new microservices applications to systematically verify defense-in-depth controls. It ensures network segmentation, authentication, and Zero Trust principles are properly implemented.

Related Skills

Explore More Software Engineering Skills→
johngutierrez31johngutierrez31

threat-modeling-expert

Apply STRIDE threat analysis to system architecture diagrams.

Community
Advanced
pluginagentmarketplacepluginagentmarketplace
3

secure-deployment

Enforce defense-in-depth security practices across AI/ML production deployments.

Community
Advanced
adaptive-enforcement-labadaptive-enforcement-lab
3

gke-security-hardening-guide

Hardens Google Kubernetes Engine clusters via Pulumi IaC across QAC, DEV, ...

Official
Advanced
zebbernzebbern
4.5k

AWS Penetration Testing

Enumerate AWS IAM misconfigurations and privilege escalation paths.

Community
Advanced