使用说明Threat Modeling 内容assets文件夹contracts文件夹data-model.yaml77.9 kBdocs文件夹ARCHITECTURE-WORKFLOW-GUIDE-cn.md87.2 kBARCHITECTURE-WORKFLOW-GUIDE.md87.2 kBKNOWLEDGE-ARCHITECTURE-v5.2-cn.md61.4 kBKNOWLEDGE-ARCHITECTURE-v5.2.md61.8 kBREPORT-DESIGN.md9.1 kBSKILL-ARCHITECTURE-DESIGN-cn.md95.4 kBSKILL-ARCHITECTURE-DESIGN.md105.4 kBSkillset-threat-modeling-tour-cn-v5.md92.3 kBSkillset-threat-modeling-tour-v5.md101.9 kBhooks文件夹hooks.json0.4 kBphase_end_hook.sh11.2 kBREADME.md4.3 kBsettings-example.json1.0 kBknowledge文件夹phase2文件夹completeness-rules.yaml26.1 kBdata-store-patterns.yaml19.8 kBframework-routing-patterns.yaml40.6 kBsecurity-checkpoint-patterns.yaml29.6 kBsecurity-controls文件夹references文件夹reference-set-01-authentication.md36.1 kBreference-set-01-cookie-theft-mitigation.md7.3 kBreference-set-01-credential-stuffing-prevention.md17.3 kBreference-set-01-forgot-password.md9.5 kBreference-set-01-jaas.md7.9 kBreference-set-01-jwt-java.md27.5 kBreference-set-01-multifactor-authentication.md31.2 kBreference-set-01-password-storage.md18.4 kBreference-set-01-saml-security.md28.8 kBreference-set-01-security-questions.md12.0 kBreference-set-01-session-management.md51.0 kBreference-set-02-access-control.md0.3 kBreference-set-02-authorization.md31.6 kBreference-set-02-idor-prevention.md3.4 kBreference-set-02-transaction-authorization.md18.0 kBreference-set-03-bean-validation.md12.8 kBreference-set-03-deserialization.md23.0 kBreference-set-03-file-upload.md11.8 kBreference-set-03-injection-prevention-java.md0.3 kBreference-set-03-injection-prevention.md20.3 kBreference-set-03-input-validation.md18.9 kBreference-set-03-ldap-injection-prevention.md9.4 kBreference-set-03-mass-assignment.md7.7 kBreference-set-03-os-command-injection-defense.md11.5 kBreference-set-03-query-parameterization.md7.9 kBreference-set-03-sql-injection-prevention.md19.0 kBreference-set-03-ssrf-prevention.md25.9 kBreference-set-03-unvalidated-redirects.md8.0 kBreference-set-05-clickjacking-defense.md15.1 kBreference-set-05-csp.md18.6 kBreference-set-05-csrf-prevention.md68.2 kBreference-set-05-css-security.md6.3 kBreference-set-05-dom-clobbering-prevention.md13.0 kBreference-set-05-dom-xss-prevention.md28.5 kBreference-set-05-hsts.md4.0 kBreference-set-05-html5-security.md14.2 kBreference-set-05-http-headers.md19.4 kBreference-set-05-prototype-pollution-prevention.md2.3 kBreference-set-05-third-party-javascript.md23.6 kBreference-set-05-xss-filter-evasion.md45.4 kBreference-set-05-xss-prevention.md27.1 kBreference-set-06-certificate-pinning.md15.9 kBreference-set-06-cryptographic-storage.md19.6 kBreference-set-06-key-management.md22.9 kBreference-set-06-tls-cipher-string.md0.3 kBreference-set-06-tls.md22.2 kBreference-set-06-transport-layer-protection.md0.3 kBreference-set-07-logging-vocabulary.md31.3 kBreference-set-07-logging.md27.8 kBreference-set-08-error-handling.md17.8 kBreference-set-08-xs-leaks.md16.9 kBreference-set-09-ajax-security.md8.5 kBreference-set-09-dos-prevention.md14.4 kBreference-set-09-graphql.md27.8 kBreference-set-09-microservices-security.md21.8 kBreference-set-09-rest-assessment.md6.2 kBreference-set-09-rest-security.md22.8 kBreference-set-09-web-service-security.md9.5 kBreference-set-10-database-security.md9.0 kBreference-set-10-secrets-management.md63.3 kBreference-set-10-user-privacy.md10.9 kBreference-set-ext-11-docker-security.md22.2 kBreference-set-ext-11-iac-security.md7.8 kBreference-set-ext-11-kubernetes-security.md67.3 kBreference-set-ext-11-nodejs-docker.md30.3 kBreference-set-ext-12-cicd-security.md26.2 kBreference-set-ext-12-dependency-management.md16.5 kBreference-set-ext-12-npm-security.md21.5 kBreference-set-ext-12-supply-chain-security.md21.1 kBreference-set-ext-13-ai-agent-security.md25.1 kBreference-set-ext-14-automotive-security.md4.3 kBreference-set-ext-14-mobile-security.md16.4 kBreference-set-ext-15-cloud-architecture.md29.4 kBreference-set-ext-16-agentic-security.md33.0 kBcontrol-set-01-authentication.md10.4 kBcontrol-set-02-authorization.md3.7 kBcontrol-set-03-input-validation.md4.9 kBcontrol-set-04-output-encoding.md7.9 kBcontrol-set-05-client-side.md5.7 kBcontrol-set-06-cryptography.md4.0 kBcontrol-set-07-logging.md2.4 kBcontrol-set-08-error-handling.md7.4 kBcontrol-set-09-api-security.md4.4 kBcontrol-set-10-data-protection.md3.9 kBcontrol-set-ext-01_02-auth-patterns.md7.0 kBcontrol-set-ext-10-hardcoded-credentials.md1.8 kBcontrol-set-ext-11-infrastructure.md2.3 kBcontrol-set-ext-12-supply-chain.md2.2 kBcontrol-set-ext-13-ai-llm.md2.0 kBcontrol-set-ext-14-mobile.md2.1 kBcontrol-set-ext-15-cloud.md2.1 kBcontrol-set-ext-16-agentic.md19.2 kBagentic-threats.yaml69.0 kBcapec-mappings.yaml293.6 kBcloud-services.yaml19.7 kBcompliance-mappings.yaml25.6 kBcomprehensive-mappings.yaml55.8 kBcwe-mappings.yaml92.1 kBllm-threats.yaml66.6 kBowasp_cwe_mapping.json5.3 kBsast-rules.yaml8.0 kBsecure-coding-rules.yaml1.5 kBsecurity-design.yaml18.2 kBsecurity-principles.yaml2.1 kBstride_cwe_mapping.json49.3 kBstride-controls-mapping.yaml8.1 kBstride-library.yaml5.2 kBverification-mappings.yaml25.0 kBphases文件夹P1-PROJECT-UNDERSTANDING.md33.2 kBP2-DFD-ANALYSIS.md44.2 kBP3-TRUST-BOUNDARY.md21.1 kBP4-SECURITY-DESIGN-REVIEW.md38.2 kBP5-STRIDE-ANALYSIS.md35.3 kBP6-RISK-VALIDATION.md41.0 kBP7-MITIGATION-PLANNING.md22.1 kBP8-REPORT-GENERATION.md30.1 kBP8R-DETAILED-REPORT.md17.4 kBscripts文件夹module_discovery.py68.1 kBphase_data.py278.1 kBreport_generator.py24.1 kBstride_matrix.py10.1 kBunified_kb_query.py114.2 kBCHANGELOG.md8.8 kBREADME-cn.md12.2 kBREADME.md13.3 kBskill_path.sh1.2 kBskill-card.md2.5 kBSKILL.md21.4 kBWORKFLOW.md14.8 kB手动下载zip · 1.1 MBdata-model.yamltext/plain请选择文件