Broadly considered to be a threat-centric framework, PASTA employs an attacker-centric viewpoint to make an asset-centric output in the form of menace enumeration and scoring. DREAD was conceived of being an add-on to the STRIDE model which allows modelers to rank threats once they’ve been discovered. DREAD stands for six https://ieeexplore.ieee.org/document/9941250