Term Kind Topic What it is
Attack Surface concept Threat Modelling The complete set of points where an untrusted actor can interact with a system — and the quantity that reduction genuinely reduces risk.
STRIDE practice Threat Modelling A mnemonic for six threat categories — spoofing, tampering, repudiation, information disclosure, denial of service, elevation of privilege — walked across each component and data flow.