Identifies the assets, describes the attackers and their access, maps the attack surface, rates each risk and records how it is treated, writes the security requirements from the risks to mitigate, and keeps the threat model current as the design and public attacks change.
The full lifecycle detail, with its charts, flows, tables and every section, is for registered members. Registration is free and takes a minute. You come back to this page afterwards.