In today’s fast-moving world, it’s necessary to simplify the development life-cycle, and therefore it is crucial to threat model. Threat modeling is about building models, and using those models to help you think about possible security threats and make rational decisions about how to address them. You model so that you can look at the forest, not the trees.

Everyone threat models at some degree when making a decision or building something. Basically, threat modeling is the analysis process to figure out what might go wrong with the thing you are building or with the decision you are making.

If you think about security problems in the abstract, threat modeling is the way of evaluating or another fancy word for something you as a security professional already know how to do.