Great posts on threat modeling


Larry Osterman includes all the links to his threat modeling series here. A must-read for folks designing all sorts of software, but especially important to higher-risk situations like Internet-facing applications.