'Threat modeling is very formal, it’s very technical, and also very hard to do correctly': Investigating Threat Modeling Practices in Open-Source Software Projects

Harjot Kaur*, Carson Powers*, Ronald E. Thompson, Sascha Fahl, Daniel Votipka
PDF
Type
Conference paper
Publication
USENIX Security Symposium
Security Professionals Secure Development Vulnerability Discovery