# Threat Modeling Skills Should Be Taught Through Formal Training

DevFeed: [Threat Modeling Skills Should Be Taught Through Formal Training](<https://devfeed.tech/articles/better-taught-than-caught-36698.md>)

Original publisher: [Read original article](<https://shostack.org/blog/better-taught-than-caught/>)

Author: Adam

Published: 2020-08-18T00:00:00Z

Content type: article

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Learning](<https://devfeed.tech/topics/learning.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>)

Tags: [developers](<https://devfeed.tech/tags/developers.md>), [learning](<https://devfeed.tech/tags/learning.md>), [security](<https://devfeed.tech/tags/security.md>), [training](<https://devfeed.tech/tags/training.md>)

## AI overview

The article argues that threat modeling should be taught through thoughtful formal training, while still incorporating hands-on practice. It recommends clear terminology, structured instruction for learners without security backgrounds, and evaluation through surveys and observation.

## Source excerpt

Informal training may work in some cases, but Threat Modeling skills should be passed on through more formal means.