Threat Model — <app name>
← all weeks · worksheet · readme · slides
Threat Model — <app name>
1. Data-flow diagram
(Insert your DFD image. Mark trust boundaries with dashed lines.)
2. Elements & trust boundaries
| Element | Type (process/store/entity/flow) | Trust boundary crossed? |
|---|---|---|
| Web client | external entity | yes (Internet → app) |
| Flask app | process | |
| SQLite DB | data store | |
| /upload endpoint | process + store |
3. STRIDE analysis
| Element | S | T | R | I | D | E |
|---|---|---|---|---|---|---|
| /notes | ||||||
| /upload |
4. Top 5 risks (likelihood × impact) + mitigation
1. 2. 3. 4. 5.