threat-model

A threat-model is a human-made structured representation of the potential threats targeting a system — capturing assets, vulnerabilities, threat actors, capabilities, motivations, and the attack paths that connect them. It is defined by four parameters: (1) scope — the system boundary and assets under analysis; (2) threat taxonomy — the categories of threat actors and their capabilities; (3) vulnerability mapping — the weaknesses that could be exploited; (4) attack scenarios — the plausible sequences through which an actor could reach a valuable asset. The threat-model persists through documentation (diagrams, attack trees, STRIDE lists), institutional knowledge in security teams, and integration into threat-assessment workflows. [formal: modellum periculi | substrate: behavior | horizon: hours | explicit: yes | epoch: 0.01]