Skip to content
AppSec PodcastThe Application Security Podcast — home
← All advice
practitionerThreat Modeling

Draw the system to align mental models

Said by Adam Shostack ·

“If I don't have the building block of I'm going to draw the system in some way, or even I'm going to draw the system with a data flow diagram, then what can happen is different people have different mental models of the system.”

Transcript evidence from Adam Shostack — The Jenga View of Threat Modeling.

Episode notes