Page History

...

A security model is also sometimes called a Threat Model (though ideally someone deploying the software would create a wider threat model that covers their entire 'system' rather than looking at any single piece of software in the abstract. They'd take the security/threat models of the software in their system as input for this effortto determine whether they are appropriate for their situation)

Security models can be very simple (like the Apache Commons one, which simply states it is not safe to provide possibly-malicious input to Commons libraries unless otherwise specified), or grow into an extensive document such as the Apache Airflow one which provides an in-depth description of the capabilities of various roles and the responsibilities of system administrators deploying Airflow. You can find more links to projects' security pages on https://security.apache.org/projects/.

...