One lesson
An individual lesson
This track has no lesson ready to buy yet. Each lesson becomes available only after it is built and reviewed.
$5.00Not available yet
All course tracks
Testing and security · 30 lessons · up to 10 minutes each
Threat Modeling
A planned threat modeling path from system diagrams to owned mitigations.
Coming Soon
One-time purchase · USD
Choose what to unlock
Access is attached to your account after payment is verified. No subscription.
Full category
Threat Modeling
Permanent access to the lessons published in this track when you buy. Future lessons are not included. 0 of 30 lessons are published; 0 are in owner review and 30 are Coming Soon.
$29.0030 lessons still in progress
Beginner
Lessons 1–10
01 Threat Modeling: Sketch system scope and assets
Topic: system scope and assets
Draw a small map of system scope and assets in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Beginner4 minComing Soon02 Threat Modeling: Name the parts of trust boundary diagram
Topic: trust boundary diagram
Label the main pieces in trust boundary diagram in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Beginner5 minComing Soon03 Threat Modeling: Trace an example of entry point inventory
Topic: entry point inventory
Follow one input through entry point inventory in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Beginner6 minComing Soon04 Threat Modeling: Compare choices for attacker goal statements
Topic: attacker goal statements
Write down one practical difference between attacker goal statements in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Beginner7 minComing Soon05 Threat Modeling: Find the boundary in STRIDE threat prompts
Topic: STRIDE threat prompts
Mark where STRIDE threat prompts in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Beginner8 minComing Soon06 Threat Modeling: Inspect an example of risk and likelihood notes
Topic: risk and likelihood notes
Annotate a minimal example of risk and likelihood notes in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Beginner9 minComing Soon07 Threat Modeling: Connect mitigation ownership to a neighboring concept
Topic: mitigation ownership
Show how mitigation ownership in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Beginner10 minComing Soon08 Threat Modeling: Spot a failure mode in abuse case test ideas
Topic: abuse case test ideas
Describe one likely failure for abuse case test ideas in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Beginner3 minComing Soon09 Threat Modeling: Read an official example of residual risk review
Topic: residual risk review
Summarize an official example of residual risk review in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Beginner5 minComing Soon10 Threat Modeling: Choose a use case for model update triggers
Topic: model update triggers
Match one small use case to model update triggers in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Beginner6 minComing Soon
Intermediate
Lessons 11–20
11 Threat Modeling: Build an example with system scope and assets
Topic: system scope and assets
Create a small working example that uses system scope and assets in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Intermediate4 minComing Soon12 Threat Modeling: Compose trust boundary diagram with another component
Topic: trust boundary diagram
Combine trust boundary diagram in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Intermediate5 minComing Soon13 Threat Modeling: Configure entry point inventory for a small case
Topic: entry point inventory
Set up entry point inventory in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Intermediate6 minComing Soon14 Threat Modeling: Validate inputs around attacker goal statements
Topic: attacker goal statements
Add a check around attacker goal statements in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Intermediate7 minComing Soon15 Threat Modeling: Use STRIDE threat prompts in a short workflow
Topic: STRIDE threat prompts
Add STRIDE threat prompts in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Intermediate8 minComing Soon16 Threat Modeling: Refactor risk and likelihood notes into a reusable unit
Topic: risk and likelihood notes
Extract risk and likelihood notes in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Intermediate9 minComing Soon17 Threat Modeling: Exercise mitigation ownership with sample data
Topic: mitigation ownership
Run sample data through mitigation ownership in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Intermediate10 minComing Soon18 Threat Modeling: Observe abuse case test ideas outputs
Topic: abuse case test ideas
Capture the result of abuse case test ideas in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Intermediate3 minComing Soon19 Threat Modeling: Recover from a residual risk review failure
Topic: residual risk review
Handle one expected failure from residual risk review in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Intermediate5 minComing Soon20 Threat Modeling: Document model update triggers behavior
Topic: model update triggers
Write a short usage note for model update triggers in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Intermediate6 minComing Soon
Advanced
Lessons 21–30
21 Threat Modeling: Test a boundary around system scope and assets
Topic: system scope and assets
Add an edge-case test for system scope and assets in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Advanced4 minComing Soon22 Threat Modeling: Harden trust boundary diagram
Topic: trust boundary diagram
Add the relevant access, safety, or validation control to trust boundary diagram in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Advanced5 minComing Soon23 Threat Modeling: Measure entry point inventory
Topic: entry point inventory
Record a small baseline for entry point inventory in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Advanced6 minComing Soon24 Threat Modeling: Reduce cost in attacker goal statements
Topic: attacker goal statements
Change one measurable cost in attacker goal statements in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Advanced7 minComing Soon25 Threat Modeling: Diagnose a STRIDE threat prompts failure
Topic: STRIDE threat prompts
Use an observable signal to explain a failure in STRIDE threat prompts in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Advanced8 minComing Soon26 Threat Modeling: Make risk and likelihood notes repeatable
Topic: risk and likelihood notes
Show that rerunning risk and likelihood notes in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Advanced9 minComing Soon27 Threat Modeling: Review trade-offs in mitigation ownership
Topic: mitigation ownership
Compare two documented approaches to mitigation ownership in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Advanced10 minComing Soon28 Threat Modeling: Improve abuse case test ideas maintainability
Topic: abuse case test ideas
Refine abuse case test ideas in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Advanced3 minComing Soon29 Threat Modeling: Verify residual risk review end to end
Topic: residual risk review
Check that a complete small flow using residual risk review in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Advanced5 minComing Soon30 Threat Modeling: Audit model update triggers against its source docs
Topic: model update triggers
Check the implementation of model update triggers in the context of system scope, trust boundaries, attacker goals, and mitigations; save a short example or check that demonstrates the result.
Advanced6 minComing Soon
Reference documentation
References support the selected track topics while its lesson content is built and reviewed progressively.
This track is a catalog outline only. Each lesson remains unavailable until it is built and personally reviewed.