Is there a standard diagram format or language for illustrating a security model and what information is needed to access specific accounts? Something like UML for passwords and 2FA?
I was recently reading Sean Coonce's blog post on how he lost $100k in crypto to a SIM port hack.
Or here's another example where
"Getting into Amazon let my hackers get into [an] Apple ID account, which helped them get into Gmail, which gave them access to Twitter".
Is there any kind of established systematic way of identifying these kinds of vulnerabilities?
In both of these examples the hackers were able to gain access to one system because they were able to gain access to other systems.
I'm envisioning a graph diagram something like this:
Where the nodes are either pieces of information, or systems to be accessed.
Does something like this already exist and is in use by security professionals?