Architecture & design validation¶

Security review:

• Threat modelling (STRIDE, DREAD)

• Data flow diagrams

• Trust boundary analysis

• Fail-safe defaults

Methods:

• Architecture Risk Analysis (ARA)

• Security Design Reviews