Why it matters

DFDs enable threat modeling. Understanding shapes practice.

Advertisement

The architecture

External entities: users, providers.

Processes: agent, LLM call, tool.

Stores: memory, DB.

Trust boundaries.

LLM DFD structureExternal entitiesuser + providerProcesses + storesagent + memory + toolsTrust boundariescross with careThreat Dragon + Microsoft Threat Modeling Tool draw DFDs; foundation for STRIDE
DFDs.
Advertisement

How it works end to end

Level 0 (context) + Level 1 (detail).

Draw before STRIDE.

Threat Dragon / Microsoft tool.