Security & Privacy
Threat model
A structured description of what could attack a system, how, and with what consequences.
Example
A threat model lists attackers, valuable assets, likely attack paths, and defenses.
Why it matters
It helps teams focus protection on plausible dangers rather than an unstructured list of worries.
You'll hear it
“What could someone reach through this new connection?”
Can you control it?
Set by the team
The people building or running the AI choose this setup. An everyday user generally needs their help to change how this part works.
Common questions
- Does a threat model predict exactly what will happen?
- No. It describes possible attacks and assumptions, not a forecast of certain events.
- Can it overlook risks?
- Yes. Missing assumptions or unfamiliar uses can leave important gaps.
- Must it focus only on outside attackers?
- No. Misused internal access and compromised suppliers can also matter.