Threat Modeling

• OWASP Threat Modeling (OWASP)
• OWASP Threat Modeling Process (OWASP)
• STRIDE Threat List (OWASP)
• DREAD Model (OWASP)
• NIST SP 800-154 Guide to Data-Centric System Threat Modeling (NIST, PDF)
• A review of threat modelling approaches for APT-style attacks (ScienceDirect)

Tools

• OWASP Threat Dragon (OWASP)
• Microsoft Visio – Create a data flow diagram in Visio (Microsoft)