Description
About The Book
Many of the most serious security failures aren’t caused by bad code. They come from design decisions and assumptions that nobody questioned. Threat modeling is how teams find those problems early, while they’re still easy to fix. This practical guide shows you how to do it, step by step. You’ll follow QuillPay, a fictional payment platform, from its business goals to its final security decisions, and build a complete threat model along the way. You don’t need to be a security expert. You just need to understand the system you’re building and be willing to ask what could go wrong.
In this book, you’ll:
● Learn to see systems the way an attacker does
● Identify the actors, assets, and data flows that matter
● Find where trust changes using trust boundaries and the attack surface
● Discover threats with STRIDE and map attack paths with attack trees
● Prioritize risks and turn them into secure design decisions
● Validate your decisions and keep threat modeling alive as the system changes
● Practice the full method on your own with a hands-on ATM exercise
About The Author:
Pulkit Mital is an application security professional with over eight years of experience spanning software development and cybersecurity. He holds a Master of Science in Cybersecurity from the University of North Carolina at Charlotte. Having worked as both a software developer and a security engineer, Pulkit brings a practical understanding of how systems are built, where security risks arise, and why addressing them early matters. His work includes penetration testing, vulnerability research, API security, and secure application design. He wrote The Practical Guide to Threat Modeling to share this perspective and help readers approach security as part of designing a system, rather than something to consider only after it has been built.
Reviews
There are no reviews yet.