Threat-Models Building Proper Threat Models: What Most People Get Wrong About OPSEC Effective threat models assess specific adversary capabilities and attack surfaces rather than implementing random security measures.