Applied Threat Modeling

Threat modeling analyzes representations of a system to identify security and privacy concerns, decide what to do about them, and evaluate whether the analysis was good enough. It is useful early, when design options remain open, and throughout the system’s life as architecture, users, dependencies, incidents, and business consequences change.