Objective Threat Model (OTM)

Objective Threat Model (OTM) differs from traditional threat model frameworks in several key ways:

• OTM emphasizes impacts and outcomes of threats over the technical mechanisms of attack.
• OTM is designed to enable use by humans and with generative AI.
  • It can be used standalone, or in conjunction with other threat model frameworks like STRIDE and MITRE ATT&CK®.
  • Challenge questions support field identification of threats.
  • Token-efficient JSON supports integration into generative AI workflows.
• OTM is released under CC0 1.0 license to promote open access. (Please name and date variants.)

The Paper

• Objective Threat Model (OTM) [HTML]
• Objective Threat Model (OTM) [PDF] 3 printed pages

Supporting Materials

• Objective Threat Model (OTM) base model 2024-12-22 [JSON]
• ChatGPT 4o 2024-12-22 efficacy Model vs Non-Model responses
• ChatGPT 4o 2024-12-22 comparison of OTM with STRIDE and MITRE ATT&CK®
• ChatGPT 4o 2024-12-22 efficacy OTM, STRIDE, MITRE ATT&CK®, and combined responses

Release History

• Original release: 2024-12-22

Additional content is available at: zerotrack.net