Threat Modeling

Kind: activity

Layer: Security Core

Record: architecture:threat-modeling

Severity: contextual

Scope: feature, system, architecture

Canonical: Ontology

The activity of listing a flow's assets, trust boundaries and threats, and choosing a mitigation for each threat.

Listed in Architecture principles, after Attack Surface Reduction and before Authentication.

Requires

• Assets
• Trust Boundaries
• Threat Scenarios

Reinforces

• Security by Design
• Risk Management

Enables

• Control Selection

Conflicts with

• Assumption-Driven Security
• Security Theater

In tension with

• Delivery Speed

Tensions

• Threat Modeling / Delivery Speed

Violated by

• Assumption-Driven Security

Refactored by

• Mitigation Plan

Severity

• contextual

Category

• Security / Privacy / Compliance / Governance

Linked from

• Anti-patterns
• Security / Privacy / Compliance / Governance
• Architecture Review Evolution Governance
• Core Vocabulary
• Security Privacy Compliance
• Severity levels
• The resolutions