Threat Modeling: A Developer’s Approach

Abstract

Threat modeling is a process of identifying vulnerabilities during the design phase, where security engineers identify these vulnerabilities by analyzing data flow diagrams (DFD) and/or sequence flow diagrams (SFD). In this research paper we will be talking about real-time test cases and possible methodologies of identifying vulnerabilities with an example, which will help developers to identify vulnerabilities when they design the product flow. We will discuss possible remediation techniques that can be adopted by the developers when developing the product.