When it comes to threat modeling, not all threats are created equal

One fundamental principle every threat modeler learns very early in their career is that not all threats are created equal. Some threats can be fixed more easily than others. Among the threats most difficult to fix — if they can be fixed at all — however, are inherent threats, which are threats that touch the essence of a system.

Threat modeler Adam Shostack explained in a recent white paper that when a threat is tied directly to a system, protective …

can career fix modeling threat threat modeling threats