Overview
Model threats in software systems using the STRIDE framework, Create Data Flow Diagrams (DFDs) to represent system architecture, Identify, prioritize, and assess threats using a risk-based approach, Map STRIDE threats to security controls and document mitigations
This course is ideal for security analysts, software developers, DevOps engineers, architects, product managers, and anyone involved in secure system design. It is also suitable for cybersecurity students and professionals preparing for roles in threat modeling, secure software development, or risk assessment. Whether you're new to STRIDE or looking to sharpen your application security skills, this course offers clear guidance, templates, and real-world examples to get you started fast.
Basic understanding of IT systems or software development is helpful but not required
Learn how to secure your software systems by mastering STRIDE — Microsoft’s industry-standard threat modeling framework. In this hands-on course, you will discover how to proactively identify and mitigate security threats early in the development lifecycle using a structured and scalable methodology. This course contains the use of artificial intelligence.
Whether you're a software engineer, security analyst, architect, DevOps professional, or product manager, this course will equip you with the skills to model threats using Data Flow Diagrams (DFDs) and apply the STRIDE framework (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege) effectively.
You’ll follow a practical, step-by-step approach:
Build a visual model of your system using DFDs
Identify threats across different components
Prioritize threats using a risk matrix
Map threats to security controls and mitigations
Track system changes that affect your threat profile
You’ll also explore real-world scenarios using a fictional health tracking app, HealthTrack, to anchor your learning in practical examples.
By the end of this course, you'll be able to:
Conduct structured threat modeling workshops
Improve design-phase security posture
Align your findings with security controls
Communicate risk to both technical and non-technical stakeholders
No prior threat modeling experience is required. All templates and examples are included. If you want to future-proof your applications and build secure software from the start, this course is for you.
Take control of your system’s security before attackers do. Enroll today and build your STRIDE modeling skills step by step.
Dr. Amar Massoud
PhD in computer science and IT manager with 35 years technical experience in various fields including IT Security, IT Governance, IT Service Management , Software Development, Project Management, Business Analysis and Software Architecture. I hold 80+ IT certifications such as :
ITIL 4 Master, ITIL 3 Expert
ISO 27001 Auditor, ComptIA Security+, GSEC, CEH, ECSA, CISM, CISSP, CISA
PGMP, MSP
PMP, PMI-ACP, Prince2 Practitioner, Praxis, Scrum Master
COBIT 2019 Implementor, COBIT 5 Assessor/Implementer
TOGAF certified
Lean Specialist, VSM Specialist
PMI RMP, ISO 31000 Risk Manager, ISO 22301 Lead Auditor
PMI-PBA, CBAP
Lean Six Sigma Black Belt, ISO 9001 Implementer
Azure Administrator, Azure DevOps Expert, AWS Practitioner
And many more.