¿Qué es Threat model?

A threat model lists what a system must protect (its assets), from whom (the adversaries and their means), through which paths (the attack surface), and which controls address each path, so that security effort goes where the losses would be.