What are some alternative threat modeling methodologies besides STRIDE and DREAD?

PASTA (risk-centric), Security Cards (brainstorming), and Persona non grata (attacker-focused) are common alternatives — STRIDE/DREAD aren't the only choices.

Alternative threat modeling methodologies beyond STRIDE/DREAD include:

• PASTA - Process for Attack Simulation and Threat Analysis (risk-centric)
• Security Cards - card-based brainstorming approach
• Persona non grata - attacker-focused approach
• And many more...

Key insight: STRIDE/DREAD aren't the only options. Choose the methodology that fits your team's skills and project needs.

See: SEI CMU: 12 Threat Modeling Methods