Security › Module 4 › Lesson 4
Lab — STRIDE
Pack STRIDE named, trust boundaries, and DFD literacy — STRIDE worksheet file from $ARCH_LAB only.
Visual · t41_stride_worksheet_lab
Lab: STRIDE worksheet pack. $ARCH_LAB only. Original Cyberlium.
Opening
STRIDE worksheet merges categories to boundaries to DFD — paperwork before architecture patterns module.
Lessons 4-1–4-3 named STRIDE, trust boundaries, and DFD literacy. This lab merges three sections into one $ARCH_LAB STRIDE worksheet with M1 ethics and M3 SBD cross-references. No live attack cookbooks or employer diagram imports — defensive threat modeling paperwork only. Next: Quiz — STRIDE Threat Modeling.
1. Lab contract: STRIDE worksheet pack
Create $HOME/cyberlium-lab/t41-m04-l04-stride-worksheet-lab.txt merging STRIDE rows, trust boundaries, and DFD elements with $ARCH_LAB fictional org LAB-ARCH-001 and M1/M3 cross-references.
Optional: link STRIDE mitigations to security requirements from M3 by feature name.
Command guide
Try these commands — Lab contract: STRIDE worksheet pack
═══ LINUX / macOS (Terminal Practice) ═══
Check system state and user context
Command — copy this
id whoami uname -a
Inspect network sockets listening for connections
Command — copy this
ss -tuln 2>/dev/null || netstat -tuln
Audit active processes
Command — copy this
ps aux | grep -v "\[" | head -15
═══ WINDOWS (POWERSHELL) ═══ Query user identity and system information
Command — copy this
whoami /all Get-ComputerInfo | Select-Object CsName, OsName, OsVersion
Primary tools to practice this lesson: grep, curl. Reference sites: Microsoft STRIDE (https://learn.microsoft.com/en-us/azure/security/develop/threat-modeling-tool); OWASP Threat Modeling (https://cheatsheetseries.owasp.org/cheatsheets/Threat_Modeling_Cheat_Sheet.html); Microsoft SDL (https://www.microsoft.com/en-us/securityengineering/sdl/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Cross-check ethics
Grep for exploit steps, live target references, employer architecture exports — remove. Confirm all components are $ARCH_LAB fictional placeholders.
STRIDE mitigations stay defensive — not offensive cookbooks.
3. Lock the proof
chmod 600 on the pack. Quiz next — then DMZ and Segmentation.
STRIDE literacy feeds architecture patterns lessons in M5.
4. What you ship: STRIDE worksheet pack for $ARCH_LAB
Merged STRIDE, boundaries, DFD sections. $ARCH_LAB named. NO attack cookbooks. chmod 600.
5. What you record before the next lesson
Date. STRIDE worksheet path. $ARCH_LAB named. File t41-m04-l04-stride-worksheet-lab.txt chmod 600.
6. Wrong vs right: offensive playbooks vs YOUR threat models
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Include live exploit walkthrough in worksheet. Skip trust boundary section.
Right
Write YOUR STRIDE worksheet pack for $ARCH_LAB. chmod 600. Next: Quiz — STRIDE Threat Modeling.
Mission: freeze YOUR STRIDE worksheet pack on disk
1) Merge M4 literacy sections. 2) Confirm zero attack cookbook refs. 3) Link M1/M3 cross-refs. 4) chmod 600.
Stuck? Ask Cyberlium AI Mentor
One governed STRIDE worksheet beats ten inconsistent threat sticky notes.
Knowledge Check
APPLY: This lab requires:
Multiple choice
Knowledge Check
APPLY: True or False: STRIDE worksheet should include trust boundaries and mitigations.
True or False
Knowledge Check
APPLY: STRIDE worksheet supports:
Multiple choice