TRACE: A Threat Modelling Methodology for Distributed, Cloud-First, and Decentralized Organisations

Established threat modelling methodologies STRIDE, PASTA, Trike, OCTAVE, LINDDUN, attack trees, and adversary-behaviour catalogues such as MITRE ATT&CK were designed for software products and enterprises with a discernible security perimeter, a single owning organisation, and a clean separation...