Threat Modeling Architecture

This example illustrates how to perform STRIDE-based architecture threat modeling natively within .ea models.

workspace threat_landscape "E-Commerce Threat Landscape" {

    layer "Application Layer" {
        system sys_web_store "Online Storefront" {
            internet_facing true
        }

        data_object data_orders "Customer Order Database" {
            classification "Confidential"
            pii true
        }
    }

    layer "Security & Threat Layer" {
        trust_boundary zone_public_dmz "Public DMZ Perimeter" {
            boundary_type "DMZ"
            trust_level "Untrusted"

            relationships {
                this encloses sys_web_store
            }
        }

        threat threat_ddos "Layer-7 HTTP Flood Attack" {
            category "DoS"
            likelihood "High"
            impact "High"
            mitigation_status "Mitigated"

            relationships {
                this targets sys_web_store "Exhausts web worker pools"
            }
        }

        control ctrl_cloudflare_waf "Cloudflare Enterprise WAF" {
            control_type "Preventive"
            control_category "Network Security"
            effectiveness "High"

            relationships {
                this mitigates threat_ddos "Automatically sheds volumetric traffic"
                this protects sys_web_store
            }
        }
    }
}