{"id":18586,"date":"2026-08-21T06:35:00","date_gmt":"2026-08-21T10:35:00","guid":{"rendered":"https:\/\/www.netwitness.com\/?post_type=glossary&p=18586"},"modified":"2026-08-21T07:29:03","modified_gmt":"2026-08-21T11:29:03","slug":"threat-modelling","status":"publish","type":"glossary","link":"https:\/\/www.netwitness.com\/ko\/cyber-glossary\/threat-modelling\/","title":{"rendered":"Threat Modelling"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

What is Threat Modelling?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Threat Modelling<\/span><\/b> is a structured cybersecurity practice used to identify, analyse, prioritise, and mitigate potential threats to applications, systems, networks, cloud environments, and business processes. It helps security and development teams understand how a threat actor could exploit vulnerabilities, what attack vectors could be used, and which threat mitigations should be implemented.<\/span>\u00a0<\/span><\/p>

Unlike a vulnerability assessment or penetration testing, threat modelling<\/a> is primarily proactive. It can be performed during the design and development stages to identify security weaknesses before they become exploitable, and it should be revisited as systems, architectures, dependencies, and the threat landscape change.<\/span>\u00a0<\/span><\/p>

Threat modelling is also known as <\/span>risk modelling, threat mapping, threat analysis, attack modelling, adversarial modelling, attack surface analysis, cyber threat assessment, threat exposure analysis, security risk assessment,<\/span><\/b> and <\/span>security threat assessment<\/span><\/b>.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Synonyms<\/h2>\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t