Labs · Risk
Threat Modeling Lab
Threat model a fictional clinic booking web app. Draw trust boundaries on its data flow diagram, find what the engineers left out, apply STRIDE to every element, rate each threat, choose mitigations that fix the cause, then get the residual risk accepted by the right people.