Tag
threat-enumeration
- May 23, 2025 Attack Tree Semantics: AND/OR Nodes and the Cost of the Cheapest Path How attack trees represent alternative and conjunctive attacker actions, how cost and probability propagate through the two node types, and why the cheapest path is rarely the most likely one. security
- Jan 17, 2023 Applying STRIDE per Element Instead of per System Why the six threat classes are property violations, which of them are vacuous for each diagram element type, and how the per-element grid turns a mnemonic into an assignable work list. security