The threat model can have different types of threats added to it according to the diagram type. Currently the supported types are STRIDE, LINDDUN, CIA, CIA-DIE and PLOT4ai; these are selected as part of the diagram attributes when editing the model. A ‘Generic’ type is provided so that you can select any type of threat from any of the categories.
Note that it is OK to select one diagram type, enter some threats into the model, and then change the model/diagram type. No threats are removed when you do this, and your previous threats will still be retained in the model.
For example if a threat is added using CIA and the model type is then changed to LINDDUN, then the original CIA threat is still in the model and can be edited as before. In addition if LINDDUN threats are added and then the model is changed back to CIA then both LINDDUN and CIA threats are in the model and both types can be edited. Of course, same goes for STRIDE and so on.
Diagram types are used to guide the identification of threats by suggesting categories of threats. There are various types of diagrams provided by Threat Dragon, and is perfectly OK to have diagrams of different types within the same model.
STRIDE is one of the earliest threat categorizations:
The LINDDUN diagrams provide threat categories with a focus on privacy :
PLOT4ai provides for Artificial Intelligence threat modeling:
The CIA triad is a basic and enduring threat categorization:
The DIE diagram type adds more categories to the CIA triad which can be used for cloud based threat modeling:
The generic diagram type allows selection from any of the threat categories for the diagram types above.
Some threat categories are associated with some diagram elements more than others. For example an Actor element is more likely to have Spoofing and Repudiation threats associated with it, and less likely to be vulnerable to Tampering, Information disclosure, Denial of service or Elevation of privileges.
According to the type of diagram (STRIDE, LINDDUN and PLOT4ai), Threat Dragon will restrict the threat type according to the element chosen. If you find this too restrictive then change the diagram type to ‘Generic’ and this will allow you to select any threat type for any type of element; the diagram type can be changed back to STRIDE, LINDDUN or PLOT4ai later on.
CIA or CIA-DIE diagrams do not restrict the threat type by element.
S | T | R | I | D | E
ACTOR | X | | X | | |
STORE | | X | X | X | X |
PROCESS | X | X | X | X | X | X
FLOW | | X | | X | X |
L | I | N | D | D | U | N
ACTOR | X | X | | | | X |
STORE | X | X | X | X | X | | X
FLOW | X | X | X | X | X | | X
PROCESS | X | X | X | X | X | | X
T | A | I | S | S | U | E | N
ACTOR | | X | X | X | X | X | X |
STORE | X | X | X | X | | | | X
FLOW | X | | X | X | | | | X
PROCESS | X | X | X | X | | | | X
Threat Dragon: making threat modeling less threatening