技能 编程开发 STRIDE威胁建模分析

STRIDE威胁建模分析

v20260928
stride-analysis-patterns
本技能旨在利用STRIDE方法论(伪造、篡改、否认、信息泄露、拒绝服务、权限提升)系统地识别系统潜在的安全威胁。适用于系统安全分析、进行威胁建模、审查安全设计决策,以及撰写安全文档和进行合规审计等场景。
获取技能
214 次下载
概览

STRIDE Analysis Patterns

Systematic threat identification using the STRIDE methodology.

Use this skill when

  • Starting new threat modeling sessions
  • Analyzing existing system architecture
  • Reviewing security design decisions
  • Creating threat documentation
  • Training teams on threat identification
  • Compliance and audit preparation

Do not use this skill when

  • The task is unrelated to stride analysis patterns
  • You need a different domain or tool outside this scope

Instructions

  • Clarify goals, constraints, and required inputs.
  • Apply relevant best practices and validate outcomes.
  • Provide actionable steps and verification.
  • If detailed examples are required, open resources/implementation-playbook.md.

Resources

  • resources/implementation-playbook.md for detailed patterns and examples.

Limitations

  • Use this skill only when the task clearly matches the scope described above.
  • Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
  • Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.
信息
Category 编程开发
Name stride-analysis-patterns
版本 v20260928
大小 6.94KB
更新时间 2026-09-29
语言