Threat Model Examples

This repository contains various threat model examples for different technologies and systems. These resources provide illustrative examples of threat models across different domains, helping security professionals, developers, and researchers better understand how threat modeling can be applied effectively to address security risks.

This project was established to give an idea of how the end results of a threat model might look like. With so many guidelines and methodologies available, we noticed that having concrete examples would help the community better understand what 'good' looks like.

---

🛡️ Web & API Security

• OAuth 2.0

  • OAuth 2.0 Threat Model (RFC 6819)

• SSL

  • 

• DNSSEC, DoT, and DoH

  • DNSSEC, DoT, and DoH Threat Model

• Web Application

  • OWASP Threat Modeling Process

---

🧠 AI Security

• Generative AI Workloads - AWS
• Agentic AI - OWASP (Page 12)
• Generative AI App Hosted in Azure - Aristiun

---

☁️ Cloud & Container Security

Cloud and container environments are essential for scalable infrastructure but are also prime targets for attacks. The following examples showcase key threat models in these areas.

• Kubernetes

  • Kubernetes Threat Model - CNCF Financial User Group
  • Kubernetes Hardening Guidance (DoD) (Page 5)
  • Kubernetes Threat Model - CloudSecDocs
  • A Deep Dive Into Kubernetes Threat Modeling - Trend Micro

• Docker

  • Docker Threat Model - CloudSecDocs

• AWS Fargate

  • AWS Fargate Threat Modeling - Sysdig

• Amazon S3

  • Amazon S3 Threat Model - TrustonCloud

• Google Cloud Storage

  • Google Cloud Storage Threat Model - NCC Group

---

📱 Mobile & IoT Security

Mobile and IoT devices are integral to modern systems, but they introduce unique security challenges. These examples demonstrate approaches to mitigate such risks.

• IoT Authentication

  • IoT Authentication Threat Modeling - SAFECode (Page 18)

• IoT Devices

  • IoT Devices Security Threat Models - PSA Certified

• Smart Home

  • Smart Home Threat Model - GitHub

• IoT Supply Chain

  • Supply Chain for IoT Threat Model - ENISA

---

🧠 AI & Machine Learning Security

AI systems are becoming increasingly integrated into critical operations. The following example explores threat modeling for generative AI workloads.

• Generative AI Workloads
  • Threat Modeling Your Generative AI Workload to Evaluate Security Risk - AWS

---

🏢 Enterprise Security

• PCI DSS

  • PCI Threat Model - Adam Shostack

• Password Storage Module (PSM)

  • Secure Password Storage - OWASP

• Certificate Transparency

  • Certificate Transparency Threat Analysis

• Account Takeover (ATO)

  • ATO Threat Model Checklist

• Password Managers

  • Password Manager Threat Model - Stanford (Page 5)

---

🏦 Specialized Systems & Technologies

• Medical Devices (AMPS, SNAP, SKATE)

  • Playbook for Threat Modeling Medical Devices - MITRE

• Connected Cars

  • Driving Security Into Connected Cars - Trend Micro

• Electric Vehicle Charging Infrastructure

  • A Threat Model of High-Power Electric Vehicle Charging Infrastructure - PNNL

---

📢 Contributing

We welcome contributions from the community! Open a pull request to share your expertise.

📝 License

This repository is licensed under the MIT License. See the LICENSE file for more details.