threat model

term

securitygovernance & risk

A structured look at what could go wrong, who might attack, and what is worth defending.

Threat modeling asks, before building, what are we protecting, who wants it, how might they get it, and what will we do about it. Frameworks like STRIDE give it structure. The output guides where to spend limited security effort.

Also known as: threat-model, threat modeling, STRIDE, attack surface

All glossary entries