Threat Modelling & Zero Trust Security Evaluation

Evaluating a cloud-based media delivery architecture using STRIDE threat modelling, risk assessment and Zero Trust security controls.

Overview

This project evaluates the security of a cloud-based media delivery architecture and examines how a Zero Trust approach can reduce identified risks.

Threat Modelling

STRIDE was used to structure the threat analysis across the architecture. Identified threats were assessed using likelihood and impact to establish a prioritised risk picture.

Zero Trust Controls

The architecture applies identity-aware access, least-privilege IAM roles, authenticated access and controlled permissions across the cloud components.

Security Evaluation

Security testing was used to verify that restricted actions were denied under the intended role. The resulting evidence supports the comparison between the baseline and the security-controlled architecture.