# Jonathan Marcil's Threat Modeling Toolkit talk

DevFeed: [Jonathan Marcil's Threat Modeling Toolkit talk](<https://devfeed.tech/articles/jonathan-marcil-s-threat-modeling-toolkit-talk-36857.md>)

Original publisher: [Read original article](<https://shostack.org/blog/jonathan-marcils-threat-modeling-toolkit-talk/>)

Author: Adam

Published: 2018-01-30T00:00:00Z

Content type: article

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Application Security](<https://devfeed.tech/topics/application-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [plantuml](<https://devfeed.tech/topics/plantuml.md>), [version-control](<https://devfeed.tech/topics/version-control.md>), [trust](<https://devfeed.tech/topics/trust.md>)

Tags: [appsec](<https://devfeed.tech/tags/appsec.md>), [blog](<https://devfeed.tech/tags/blog.md>), [diagram](<https://devfeed.tech/tags/diagram.md>), [github](<https://devfeed.tech/tags/github.md>), [plantuml](<https://devfeed.tech/tags/plantuml.md>), [requirements](<https://devfeed.tech/tags/requirements.md>), [security](<https://devfeed.tech/tags/security.md>), [talk](<https://devfeed.tech/tags/talk.md>), [trust](<https://devfeed.tech/tags/trust.md>), [version-control](<https://devfeed.tech/tags/version-control.md>)

## AI overview

A report on Jonathan Marcil's threat modeling toolkit talk, covering collaborative threat modeling, data flow diagrams, attack trees, controls checklists, and system models. The talk includes an Electrum example in which investigations driven by a system model found a real JSON-RPC vulnerability, and discusses using PlantUML and version control for attack trees.

## Source excerpt

[no description provided]