https://dplabs.tech/tags/threat-modeling/ Recent content in Threat-Modeling on dplabs — Software Engineering & Technology Consultancy Hugo en-us Mon, 26 May 2025 00:00:00 +0000 https://dplabs.tech/blog/security-is-architecture-concern/ Mon, 26 May 2025 00:00:00 +0000 https://dplabs.tech/blog/security-is-architecture-concern/ <p>Security gets treated as a feature set: authentication, authorization, input validation, encryption. Implement those features and the system is secure. This framing is wrong and produces systems that are secure in obvious ways while vulnerable in non-obvious ones.</p> <p>Security is an emergent property of architectural decisions: where trust boundaries are placed, how data flows between components, what permissions components have, how failures are handled. These decisions are made during design, not during a security review at the end.</p>