https://nalar.dev/tags/application-security/ Recent content in Application Security on Nalar Hugo en-us Tue, 01 Sep 2026 00:00:00 +0700 https://nalar.dev/practical-threat-modeling-with-trust-boundaries/ Tue, 01 Sep 2026 00:00:00 +0700 https://nalar.dev/practical-threat-modeling-with-trust-boundaries/ <p>Threat modeling is most useful before a vulnerability becomes a patch request. It gives a team a structured way to ask how a system can be misused, which assumptions are security-sensitive, and where defenses should exist.</p> <p>A useful threat model does not need to be a large document. For many services, a one-page data-flow sketch plus a prioritized set of abuse cases is enough to improve design decisions.</p> <h2 id="begin-with-assets-and-security-goals">Begin with assets and security goals</h2> <p>Start by identifying what the system is trying to protect.</p>