Threat Modeling Skill

Purpose

This skill embodies the complete Hack23 AB threat modeling methodology as defined in ISMS Threat_Modeling.md. It provides systematic threat identification, risk quantification, and security control validation for proactive security assurance across all Hack23 projects.

Key Philosophy: "Security through transparency" - All threat models are publicly documented to demonstrate security excellence to clients, regulators, and the open-source community.

Hack23 Threat Modeling Process (ISMS § 4)

Per ISMS Threat_Modeling.md, Hack23 employs a five-strategy integrated approach:

1. 🎯 Attacker-Centric (ISMS § 4.1)

MITRE ATT&CK Framework Integration

• Map attack tactics and techniques to system components
• Identify threat agents (Nation-state APTs, Cybercriminals, Hacktivists, Malicious Insiders)
• Analyze attack scenarios based on current threat intelligence (ENISA Threat Landscape 2024)
• Red team perspective: "How would I compromise this system?"