Why do we keep our darkest fears secret? Publish them, and bring light to the darkest corners of your web application.

When Adam Schostack + associates last year urged everyone to publish their threat model, we thought, «What a wonderful idea!»



So we went ahead and did just that. At cornucopia.owasp.org, you can now find the threat model for...