# Organizing Threat Modeling Magic

DevFeed: [Organizing Threat Modeling Magic](<https://devfeed.tech/articles/organizing-threat-modeling-magic-36922.md>)

Original publisher: [Read original article](<https://shostack.org/blog/organizing-threat-modeling-magic/>)

Author: Jonathan Marcil

Published: 2017-08-29T00:00:00Z

Content type: article

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>)

Tags: [application](<https://devfeed.tech/tags/application.md>), [coverage](<https://devfeed.tech/tags/coverage.md>), [magic](<https://devfeed.tech/tags/magic.md>)

## AI overview

The article presents a personal approach to threat modeling that represents system threats as attack trees. It describes weighting branches to estimate effort, aggregate sub-goal and root-goal priorities, and choose which technical efforts to pursue based on attacker motivations and tradeoffs.

## Source excerpt

[no description provided]