Continuous TRAIL

Summary: Trail of Bits proposes TRAIL, a Threat and Risk Analysis Informed Lifecycle in which teams incrementally update a threat model at each phase of the SDLC rather than treating the completed report as a one-time snapshot. The post recommends keeping trust zones, threat actors, trust zone connections, and security-relevant assumptions current during design and implementation, and revisiting components, threat actor paths, sensitive data, and security control categories once the system reaches maintenance.
What you should know: A threat model documents only the risks present at the time of assessment, so every new component, trust zone, actor, or boundary-crossing connection added afterward is a risk the original report never covered. The post's test for each new connection is direct: whether it violates a previously held security assumption or lets an actor who was not previously considered traverse the path.

Read the original at Trail of Bits Blog ↗