# Threat Model Thursday: Data Flow Diagrams

DevFeed: [Threat Model Thursday: Data Flow Diagrams](<https://devfeed.tech/articles/threat-model-thursday-data-flow-diagrams-37074.md>)

Original publisher: [Read original article](<https://shostack.org/blog/tmt-data-flow-diagrams/>)

Author: Adam

Published: 2020-04-23T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [trust](<https://devfeed.tech/topics/trust.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [data](<https://devfeed.tech/topics/data.md>)

Tags: [academic](<https://devfeed.tech/tags/academic.md>), [diagram](<https://devfeed.tech/tags/diagram.md>), [paper](<https://devfeed.tech/tags/paper.md>), [security](<https://devfeed.tech/tags/security.md>), [software-engineering](<https://devfeed.tech/tags/software-engineering.md>), [trust](<https://devfeed.tech/tags/trust.md>)

## AI overview

The article discusses an academic paper on whether data flow diagrams are sufficient for security threat modeling. It reviews the paper's treatment of diagram strengths, weaknesses, effort tradeoffs, and three meanings of a trust boundary, then proposes a fourth meaning: separation of principals by a controlling mechanism.

## Source excerpt

This week's threat model Thursday looks at an academic paper, Security Threat Modeling: Are Data Flow Diagrams Enough? by Laurens Sion and colleagues.