# Threat Model Thursdays: Crispin Cowan

DevFeed: [Threat Model Thursdays: Crispin Cowan](<https://devfeed.tech/articles/threat-model-thursdays-crispin-cowan-37073.md>)

Original publisher: [Read original article](<https://shostack.org/blog/tmt-crispin-cowan/>)

Author: Adam

Published: 2018-07-05T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>)

Tags: [diagram](<https://devfeed.tech/tags/diagram.md>), [discussion](<https://devfeed.tech/tags/discussion.md>), [security](<https://devfeed.tech/tags/security.md>), [trust](<https://devfeed.tech/tags/trust.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

## AI overview

The article reviews Crispin Cowan's threat-modeling approach, focusing on precise definitions of security principals, attack surfaces, trust boundaries, and security boundaries. It also discusses identifying system connections, assessing complexity, prioritizing mitigations, and documenting threat models.

## Source excerpt

[no description provided]