Tag
threat-modeling
- Apr 16, 2026 Attack Graphs, Shared Subgoals, and Shortest Paths Through State Space How an attack graph differs from an attack tree, why shared subgoals force a DAG, and how monotone reachability analysis computes the closure of what an attacker can obtain. security
- Apr 25, 2025 Attack-Defense Trees and Countermeasure Selection as a Two-Player Problem How adding defender nodes changes attack tree semantics from satisfiability to a game, what min-max evaluation computes, and why the defender moving first or second changes the answer. security
- Apr 21, 2025 Assets as Security Properties Rather Than Components Why an asset inventory keyed by server names produces useless threat lists, how to decompose a system into confidentiality, integrity, and availability assets, and what ownership of each asset implies. security
- Dec 12, 2024 Trust Boundaries in Data Flow Diagrams and Where Threats Localize How a data flow diagram encodes trust as lines rather than prose, why a boundary is only real where a principal loses authority, and how moving one line changes the entire threat list. security
- Jan 30, 2023 DREAD Scores and Why Ordinal Risk Ratings Do Not Multiply What the five DREAD dimensions actually ask, why averaging ordinal ranks produces a number with no meaning, and how to replace the arithmetic with a comparison that survives review. security