stride-analysis-patterns

Enumerate STRIDE threats, construct DFDs, score risks with DREAD, and map mitigations.

2|Updated Mar 15, 2025

Search Tags:#security #threat modeling #risk assessment #stride #mitigation #dfd

Ready to run

npx skills add https://github.com/dandudzi/dotfiles --skill stride-analysis-patterns-dandudzi

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: stride-analysis-patterns
Source: https://github.com/dandudzi/dotfiles/tree/main/dot_claude/skills/stride-analysis-patterns
Command: npx skills add https://github.com/dandudzi/dotfiles --skill stride-analysis-patterns-dandudzi

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a comprehensive framework for identifying, analyzing, and mitigating security threats within a system by leveraging the STRIDE threat modeling methodology.

Core Features & Use Cases

STRIDE Threat Enumeration: Systematically identifies potential threats across Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.
Data Flow Diagram (DFD) Construction: Guides the creation of DFDs to visualize system components, data flows, and trust boundaries.
Risk Scoring & Mitigation: Offers the DREAD methodology for risk assessment and maps security controls to identified threats.
Use Case: A security architect can use this Skill to perform a thorough threat model for a new microservice, ensuring all potential vulnerabilities are considered and addressed before deployment.

Quick Start

Use the stride-analysis-patterns skill to enumerate threats for a web API and its associated database.

Frequently Asked Questions about stride-analysis-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

What is STRIDE threat modeling and how does it secure system architecture?▼

STRIDE threat modeling categorizes security risks into Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege. It assesses system architecture to map security controls against enumerated threats.

How do I perform a risk assessment using DREAD and STRIDE methodologies?▼

Perform a risk assessment by enumerating threats using STRIDE categories, then applying the DREAD methodology to score the risk level of each identified threat, and finally mapping those scores to appropriate security mitigation controls.

How do I build a Data Flow Diagram for threat modeling a web API and database?▼

Build a Data Flow Diagram (DFD) by mapping system components, visualizing data flows between the web API and database, and defining trust boundaries. The DFD construction guides systematic threat enumeration across the architecture.

When should I use STRIDE analysis for microservice security assessment?▼

Use STRIDE analysis for microservice security assessment before deployment to ensure all potential vulnerabilities are considered. It provides a comprehensive framework to evaluate threats across data flows, trust boundaries, and system components.

What is the best way to map security controls to identified threats during threat modeling?▼

The best way to map security controls is to enumerate concrete threat examples using STRIDE, score their risk using DREAD, and directly map mitigation strategies to those specific threats to ensure comprehensive system security coverage.