Threat Modeling
A systematic process for identifying assets, trust boundaries, attackers, abuse cases, and mitigations before or during system design.
Security Context
Threat modeling identifies assets, trust boundaries, data flows, privileges, adversaries, abuse cases, and mitigations before or during system design. Frameworks such as STRIDE can help structure the work, but the main value comes from accurately modeling the real architecture and its privilege transitions.
Analysis Boundary
A threat model is not a vulnerability scan. It can identify design risks before an exploitable implementation defect exists, and it must be revisited as the architecture changes.