What is the contribution of the Attacker Type entity to the threat model?
The Attacker Types as well as the Entry Points entities are not mandatory for the PTA threat model. They were designed to help the analyst in affirming the validity of the threat scenarios and do not impact the calculation. This is also true for the Tags and the Attached Documents entities which add descriptive fields and additional information to the threat entities. 25. Two practical tips for building threat models: 1. When initiating a new threat analysis project it may be productive to reuse the last project you did (or one of the sample projects) as a base line. 2. Keep it simple. The following recipe may look a little counter-intuitive but if you follow the data entry order it will save you grief. First – Define your assets, the ones that when damaged youll feel the blow e.g. the availability of the companys Web site if the site is down we lose money. Then – Define countermeasures as mitigating activities. Each countermeasure description should contain a verb e.g. install and con
