Threat Modeler

STRIDE is a threat framework: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege. Walk each component of a system and pick the STRIDE categories that apply plus the mitigations you'd require. +1 per correct pick, −1 per wrong pick (floored to 0 per component per category).