LLM-Specific Threat Modeling

Why it matters

LLM specifics need dedicated modeling. Understanding shapes coverage.

The architecture

Extend STRIDE / PASTA with LLM threat catalog.

Model surfaces: prompt, model, tools, retrieved data, memory.

How it works end to end

OWASP LLM Top 10 catalog.

MITRE ATLAS tactics.

Prompt + agent + RAG surfaces.

Custom threats for domain.