Threat Model Template

Create a threat model for the following system:

{{system}}

Using the STRIDE framework, analyze:

**S — Spoofing** (Identity)
- How could an attacker impersonate a legitimate user or service?

**T — Tampering** (Data Integrity)
- Where could data be modified in transit or at rest?

**R — Repudiation** (Accountability)
- Can users deny performing actions? Is there adequate logging?

**I — Information Disclosure** (Confidentiality)
- Where could sensitive data be exposed?

**D — Denial of Service** (Availability)
- What endpoints or resources could be overwhelmed?

**E — Elevation of Privilege** (Authorization)
- How could a user gain unauthorized access?

For each threat:
- Likelihood: High / Medium / Low
- Impact: Critical / High / Medium / Low
- Mitigation: Specific countermeasure
- Status: Mitigated / Partially Mitigated / Open