Home > Resources > books > Shostack-Threat-Modeling

Threat Modeling: Designing for Security

Last modified: 2026-10-23

URL: https://www.wiley.com/en-us/Threat+Modeling%3A+Designing+for+Security-p-9781118809990

Summary

Adam Shostack's book (Wiley, 2014) on systematic threat modeling: the four-question framework, STRIDE, attack trees, data-flow diagrams, and how to integrate threat modeling into development. Used in the e-ID taxonomy work as a reference for structuring attacker models when comparing identity systems and the privacy guarantees that ZKPs can (and cannot) provide.