Zanero, Coming of Age - Stressing the Importance of Threat Models. “The only way to reason sensibly about the security of a system, the closest thing we have to a method in the madness of this field, is to start from a realistic and complete model of the threats and the attack surface of the system.”