@adamshostack@infosec.exchange
2026-09-24 21:50 UTC
LLMs can drive down the costs of diagramming or modeling. Above, I wrote about the work to build models, and that really is changing. The change is unevenly distributed, and its impact is hard to see right now, but overarchingly, I think we’re going to move from diagrams to models as the cost of those models drops, enabling deeper, model-centered system analysis. But we won’t stop there. There’s already work in model-driven system construction, and it’s not limited to security. It offers a route to generally better code, because it offers us ways to specify and build systems with a larger number of more predictable properties.
(7/9)
Replies (1)
-
@adamshostack@infosec.exchange 2026-09-24 21:50
That model-centered development won’t eliminate the use of exploratory or explanatory diagrams that I discussed in the post on diagrams and clarity (/blog/clarity-in-diagrams-threat-model-thursday/), but it will replace people creating diagrams with design, as-built, and as-operated diagrams being created on the fly from the system models. (8/9)