Threat Modeling Matrix
Marco Morana, Harpreet Singh, Francesco Piccoli · 2025
Assets targeted Threat impacts Countermeasures and risk mitigation strategies T1 Exploitation of authentication and session management flaws Weak authentication mechanisms or stolen session tokens allow unauthorized access or actions.Malicious users, external attackers Phishing attacks, stolen credentials, session hijacking User accounts, authentication tokens Unauthorized access to accounts or execution of fraudulent transactions Implement strong authentication (e.g.MFA), secure session management, and token integrity checks.T2