A category of entry points to an asset that could be used by an adversary to adversely affect that asset. Threat types include: Spoofing identity, Tampering with data, Repudiation, Information disclosure, Denial of Service, and Elevation of Privilege.