Essentially, you look at each part of the application and determine whether any of the STRIDE threat categories exist for that component or process.

• 本质上就是查看应用程序的每个部分并确定相应组件或进程是否存在任何STRIDE威胁类别。