Trust boundaries and threat model
Define the protect surface, trust crossings and evidence for an access decision.
Read the whole first subject without an account: its lessons, summary and review questions.
Subject lessons
- Lesson 1 Inventory assets and data flows as trust boundaries
- Lesson 2 Define protect surfaces and access paths
- Lesson 3 Model privilege misuse and escalation
- Lesson 4 Allocate provider and customer control responsibilities
- Lesson 5 Record an architectural decision and its assumptions
- Integrated subject summary Review questions
The remaining subjects unlock in sequence once you create a free account.