THREAT_MODEL

Category: 09. Cybersecurity
Section: Phase 2: Technical Blueprint

5. THREAT_MODEL.md

Purpose: To define threat actors, attack vectors, assets, and risk ratings.

Act as a senior threat modeling expert.
Using the PRD and System Architecture below, create a Threat Model document for this cybersecurity hackathon project.

PRD: [PASTE PRD]
ARCHITECTURE: [PASTE SYSTEM_ARCHITECTURE]

Provide:
1. Assets (What are we protecting?)
2. Threat actors (Who might attack? Script kiddies, Insiders, APTs)
3. Attack vectors (How might they attack?)
4. Threat modeling framework (STRIDE, PASTA, or OCTAVE)
5. Threat list (Each threat with description)
6. Risk rating (Likelihood × Impact)
7. Existing controls (What mitigations are already in place?)
8. Recommended controls (What should be added?)
9. Example attack scenario (Step-by-step)
10. A checklist for verifying the threat model before the demo

Explain each threat in beginner-friendly language.
Keep the threat model simple and realistic for a hackathon.