---
title: "Threat Modeling"
canonical: "https://codeandcypher.com/tags/threat-modeling/"
---

# Threat Modeling



## Index

- [Acuity Health: Part 3 — STRIDE Threat Modeling & BOLA Elimination](/series/acuity-health-security-architecture/part-3-threat-modeling-stride-api-security/index.md) (2026-09-22): Map trust boundaries with STRIDE during sprint grooming, protect data flows, and prevent Broken Object Level Authorization (BOLA) in modern healthcare APIs.

- [Instituting Cyber Threat Intelligence: Predictive Blue-Team Operations](/papers/instituting-cyber-threat-intelligence-in-healthcare/index.md) (2026-07-26): Operational blueprint for establishing a CTI program in a cloud-hosted healthcare provider, featuring threat platform evaluations and dynamic flare response.

- [Software Security Metrics, Technical Debt Quantification, and Program Maturity](/papers/csol560-risks-and-metric-in-software-systems/index.md) (2025-12-08): Quantitative framework for software security metrics, technical debt measurement, and AppSec maturity assessment (OpenSAMM/BSIMM).

- [Ransomware Simulator: Cryptographic Attack Modeling and Application-Level Defenses](/papers/csol560-ransomware-simulator/index.md) (2025-11-30): Engineering design and safe execution of a controlled ransomware simulation framework to validate endpoint detection and backup resilience.

- [Static Application Security Testing (SAST) and Secure Web Application Design](/papers/csol560-static-analysis-of-a-website-secure-design/index.md) (2025-11-24): Static application security testing (SAST) methodology and secure web application architecture aligned with OWASP Top 10 guidelines.

- [Threat Modeling and Architectural Risk Analysis: STRIDE and DREAD Applications](/papers/csol560-risks-threats-vulnerabilities/index.md) (2025-11-17): Architectural threat modeling applying STRIDE and DREAD frameworks to identify vulnerabilities and prioritize engineering mitigations.

- [Secure Software Development Life Cycle (SSDLC): Comparative Analysis of Microsoft SDL and Apple Ecosystems](/papers/csol560-secure-software-development-life-cycle-ssdlc-microso/index.md) (2025-11-14): Comparative analysis of Secure Software Development Life Cycle models, contrasting Microsoft SDL with Apple secure development practices.

- [Compromised Network Indicators and Secure Application Risk Mitigations](/papers/csol560-compromised-network-indicators-and-risk-mitigations/index.md) (2025-11-03): Technical analysis of Indicators of Compromise (IoCs), lateral movement detection, and host-based risk mitigation playbooks.

- [Secure Software Development Life Cycle (SDLC) Phase Analysis and Control Gates](/papers/csol560-csol-560-module-1-assignment-table/index.md) (2025-10-27): Comparative evaluation of eight software development life cycle (SDLC) models across requirement volatility, risk management, and security control integration.