# Fast, Cheap + Good Whitepaper

DevFeed: [Fast, Cheap + Good Whitepaper](<https://devfeed.tech/articles/fast-cheap-good-whitepaper-36787.md>)

Original publisher: [Read original article](<https://shostack.org/blog/fast-cheap-good/>)

Author: Adam

Published: 2021-12-15T00:00:00Z

Content type: article

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Application Security](<https://devfeed.tech/topics/application-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [Agile](<https://devfeed.tech/topics/agile.md>), [Framework](<https://devfeed.tech/topics/framework.md>)

Tags: [agile](<https://devfeed.tech/tags/agile.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [framework](<https://devfeed.tech/tags/framework.md>), [metrics](<https://devfeed.tech/tags/metrics.md>), [paper](<https://devfeed.tech/tags/paper.md>), [process](<https://devfeed.tech/tags/process.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

This whitepaper presents lightweight threat-modeling approaches for identifying what can go wrong and deciding when deeper analysis is needed. It evaluates the approaches using several metrics and provides a decision framework that considers effort, consistency, and assurance.

## Source excerpt

Threat modeling doesn't need to be a slow, heavyweight activity!