Definition
Threat Modelling is a method for systematically identifying Threats, potential attack scenarios and safeguards during system design.
Human Explanation
Designers consider how a system could be attacked before its construction begins.
Why it Matters
It can reveal many security problems before the solution is implemented.
Conceptual Boundary
Threat Modelling is not Security Testing of a completed system. It is analysis performed during design.
Practical Perspective
It creates the greatest value when architects, developers and security specialists perform it together.