Serverless Hotel Booking System - Threat Modelling DFD

A ready-to-use system architecture for hands-on threat modelling practice, supplied with the supporting training exercise so your team can start analysing threats straight away.

This reusable A3 Data Flow Diagram provides a fictional serverless hotel booking system designed specifically for team threat modelling exercises using our threat modeling games such as Elevation of Privilege. Use it to practise identifying threats, discuss attack paths and trust boundaries in a shared, approachable scenario.

The diagram is laminated for use with dry-wipe pens, so teams can annotate the architecture, mark areas of concern and work directly on the model during a workshop.