Adversarial Code Review

Review code from an attacker's perspective using STRIDE + OWASP frameworks.

4-Phase Review Process

Phase 1: Trust Boundary Analysis

Identify where trust transitions occur:

• External input reaching internal logic without validation → Tampering
• Implicit trust between services → Elevation of Privilege
• Shared storage without isolation → Information Disclosure
• Authentication boundaries not clearly marked → Spoofing

Output: [TRUST-BOUNDARY] findings with location, threat type, and current validation level.