---
id: threat
requestedLanguage: en
descriptionLanguage: en
---

# Threat Modeling

- Type: risk analysis practice
- Group: Security
- Placement: Security
- [Source](<https://community.owasp.org/Threat_Modeling>)

[HTML](https://dpm.cnonim.name/practices/threat/)

Identifies assets, potential threats, trust boundaries, and mitigations.

## Relationships

- may preserve decisions in: [Architecture Decision Records](/practices/adr/en.md) (support)
- may define scenarios for: [Dynamic Application Security Testing](/practices/dast/en.md) (support)
- makes threats concrete for: [Software Risk Management](/practices/risk/en.md) (support)
- helps select mitigations within: [Secure Coding Practices](/practices/securecoding/en.md) (support)
- sets the context for: [Security Architecture Review](/practices/securityreview/en.md) (support)

[Show on the map](https://dpm.cnonim.name/#practice=threat&lang=en)