“By using a structured approach to asking what can go wrong, like STRIDE or attack trees or a kill chain, you can systematically go through each of the elements of your system to make sure that you've thought about security. And that can inform the entire remainder of your AppSec program and activities.”

Transcript evidence from Adam Shostack – Threat Modeling – 5 Minute AppSec.