Myth: You must use a threat modeling framework. STRIDE and DREAD are the best-known threat modeling frameworks, with PASTA, VAST, LINDDUN, and others less well known — but familiarity does not ...