Cognitive Scaffold

Preparing your thinking workspace

arrow_back_ios_new
MENTAL MODEL · M8934

Threat Modeling

Threat Modeling
SystemsHigh supportSystems Theory
Included
account_tree

Version 1.0.0 · Updated 2026-07-30

CORE DEFINITION

Systematically identify "who might attack", "what might be attacked", "how attacks might occur", and "how to defend", considering security threats at the design stage.

SCAFFOLDING EFFECT

psychology

Reduce cognitive load

Think from the attacker's perspective. Ask "If I wanted to cause damage, how would I do it?" Use the attacker's viewpoint to discover defensive blind spots.

anchor

Anchor fast decisions

At the design stage, systematically enumerate assets, threat actors, attack surfaces, and defensive measures from the attacker's perspective, shifting security left rather than patching after the fact. A structured approach covers threat paths that might be missed by ad-hoc thinking.

MINIMUM ACTION

In progress 0/1

Practice this model in one real situation:

Check to track your progress (stored locally)
Learning progress0%
account_treeGenealogyexpand_more
menu_bookReferencesexpand_more

Source support: Explicit

  • link
    en.wikipedia.orghttps://en.wikipedia.org/wiki/Threat_modelZH · Explicit
    verified

RELATED MODELS

Related model

Wirth's Law

Wirth's law is an adage on computer performance which states that software is getting slower more rapidly than hardware is becoming faster.

arrow_forwardRelated model

Hyrum's Law

An application programming interface (API) is a connection between computers or between computer programs. It is a type of software interface, offering a service to other pieces of software. A documen

arrow_forwardRelated model

Coriolis Force

The Coriolis force is an inertial-force term needed to describe motion in a rotating reference frame, involving the cross product of frame angular velocity and relative object velocity.

arrow_forward