Threat Modeling Playbook for Secure REST and GraphQL APIs in Enterprise Systems

Abstract

Author(s): David Kim, Anika Wang, Miguel Evans. This study explores threat modeling playbook for secure rest and graphql apis in enterprise systems with a focus on practical engineering trade-offs in modern cloud-native environments. We present an implementation-driven methodology, reference architectures, and evaluation criteria that teams can adopt in api security programs. Results highlight measurable improvements in reliability, security posture, and end-user performance when the proposed practices are applied.