Threat modeling

Threat modeling is an exercise in “thinking like a hacker” to figure out what an attacker wants to accomplish (the desired “technical impact”) and how to do so (the “attack vector”).