# Threat Modeling Building Blocks

DevFeed: [Threat Modeling Building Blocks](<https://devfeed.tech/articles/threat-modeling-building-blocks-37032.md>)

Original publisher: [Read original article](<https://shostack.org/blog/threat-modeling-building-blocks/>)

Author: Adam

Published: 2019-09-04T00:00:00Z

Content type: article

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [data](<https://devfeed.tech/topics/data.md>), [Requirements](<https://devfeed.tech/topics/requirements.md>)

Tags: [building](<https://devfeed.tech/tags/building.md>), [comparison](<https://devfeed.tech/tags/comparison.md>), [data-protection](<https://devfeed.tech/tags/data-protection.md>), [models](<https://devfeed.tech/tags/models.md>), [requirements](<https://devfeed.tech/tags/requirements.md>), [results](<https://devfeed.tech/tags/results.md>), [reuse](<https://devfeed.tech/tags/reuse.md>), [tasks](<https://devfeed.tech/tags/tasks.md>), [techniques](<https://devfeed.tech/tags/techniques.md>), [things](<https://devfeed.tech/tags/things.md>)

## AI overview

The article presents threat modeling as a collection of interconnected tasks and discusses research on breaking threat modeling into smaller, assessable building blocks. It highlights comparisons involving privacy and data protection, requirements, STRIDE, CAPEC, CWE, OWASP, data-flow-diagram variants, and CARiSMA extended.

## Source excerpt

Threat modeling isn't one task -- its a collection of tasks that build on each other to produce more valuable insights.