# ThreatScope — DREAD Risk Analysis (@sanjana123-b & @arman080325)

> Category: Cybersecurity | Period: 2026 | Metric: 5-Factor Threat Engine
> Canonical URL: https://www.arman-portfolio.online/projects/dread-project/
> Live Demo: https://dread-project.onrender.com/
> Source Repository: https://github.com/sanjana123-b/dread_project.git

## Overview
A web application for performing DREAD threat modeling on systems/applications. Features auto-calculated DREAD scores, risk level assignment, CSV report exports, and an interactive aggregate dashboard.

## Architecture & Tech Stack
Django, Python, SQLite, Glassmorphism, Threat Modeling, Web Security

## Case Study

### The Problem
Threat modeling often relies on static, disconnected spreadsheets. Organizations need a dynamic way to track Damage, Reproducibility, Exploitability, Affected Users, and Discoverability (DREAD), while having an intuitive dashboard to monitor critical risks.

### Architecture & Approach
Collaborated on building a Django-based application where @sanjana123-b handled the core DREAD logic, and I implemented a massive frontend overhaul. Introduced dynamic Light/Dark mode with no FOUC, glassmorphism UI components, fluid animations, and Custom User Profiles with live FileReader avatar previews.

### Engineering Challenges & Solutions
- Preventing the 'flash of unstyled content' (FOUC) when toggling between Light and Dark mode using an inline IIFE
- Implementing a live circular preview for avatar uploads using custom JavaScript FileReader
- Merging a 5,100+ line UI redesign flawlessly without breaking the 8 automated backend tests

### Outcome & Results
A fully responsive, modern threat modeling application running in production with a custom theme and fully functional DREAD scoring engine.

### Lessons Learned
Cross-functional collaboration requires careful PR boundaries. By isolating the UI redesign into a dedicated branch and writing a detailed 5,100-line PR, we prevented backend regressions while massively upgrading the user experience.

---
Author: Arman Ahemad Khan (https://www.arman-portfolio.online/)
Role: Application Security & Full-Stack Developer
Education: Final-year B.Tech CSE at Silicon University, Bhubaneswar (CGPA 9.15, graduating May 2027)