The Trouble with Threat Modeling
...pressure to keep threat models up to date, even if teams had done a good job up front with them. There may be more pressure with other specs which are used by a broader set of people during development
Validation
Once a team had started threat modeling, they had trouble knowing if they were doing a good job. Had they done enough? Was their...
