timeline
    title Threat Modeling Roadmap

    Foundation
        : Security Fundamentals
        : Risk Management
        : Security Architecture

    System Understanding
        : Asset Inventory
        : Data Classification
        : System Architecture

    Modeling
        : Data Flow Diagrams
        : Trust Boundaries
        : Attack Surface Analysis

    Threat Discovery
        : STRIDE
        : Attack Trees
        : MITRE ATT&CK Mapping

    Risk Assessment
        : Likelihood Analysis
        : Impact Analysis
        : Risk Prioritization

    Security Design
        : Mitigation Planning
        : Security Controls
        : Secure Architecture

    Validation
        : Security Testing
        : Penetration Testing
        : Red Team Exercises

    Continuous Improvement
        : Threat Reviews
        : Architecture Updates
        : Control Optimization

Threat Modeling

• Microsoft Threat Modeling
• OWASP Threat Modeling

Threat Modeling Tools

• Microsoft Threat Modeling Tool - The Threat Modeling Tool is a core element of the Microsoft Security Development Lifecycle (SDL). It allows software architects to identify and mitigate potential security issues early, when they are relatively easy and cost-effective to resolve. As a result, it greatly reduces the total cost of development.
• Threat Dragon - OWASP Threat Dragon is a modeling tool used to create threat model diagrams as part of a secure development lifecycle. Threat Dragon follows the values and principles of the threat modeling manifesto.

Tools

• PyTM - A Pythonic framework for threat modeling.