stride-finetune.jsonl

gistfile1.txt

{
  "image": "images/webapp_diagram_01.png",
  "prompt": "Given this threat diagram, identify the STRIDE threats and categorize them by components.",
  "response": {
    "Web Server": [
      {
        "threat": "Spoofing",
        "description": "Unverified clients may impersonate legitimate users if authentication is weak.",
        "mitigation": "Implement strong authentication with MFA."
      },
      {
        "threat": "Tampering",
        "description": "HTTP parameters can be modified by an attacker.",
        "mitigation": "Use HTTPS and input validation."
      }
    ],
    "Database": [
      {
        "threat": "Information Disclosure",
        "description": "Unencrypted data may be leaked via SQL injection.",
        "mitigation": "Use parameterized queries and encrypt sensitive data."
      }
    ]
  }
}