There are a number of conventional tools for finding security vulnerabilities. These include:

• Security surveys
• Risk management
• Design basis threat
• CARVER Method
• Delphi Method
• Software vulnerability assessment tools
• Infrastructure modeling, etc.

These techniques were major breakthroughs when they were first developed, and are still useful. But they do not typically produce dramatic improvements in security. We believe that the Adversarial Vulnerability Assessment (AVA) is a more powerful tool. To learn why and how to do AVAs, see :
Philosophy on Vulnerability Assessments