Threat Modeling, Part 3 - Processhttp://blogs.msdn.com/larryosterman/archive/2005/05/10/416132.aspxContinuing the discussion on threat modeling that I started in this post (and continued in this one)... There's a critical third part of threat modeling, and that's the process of threat modeling. Threat modeling is a discipline - you need to start theen-USCommunityServer 2.1 SP1 (Build: 61025.2)Threat Modeling, then and nowhttp://blogs.msdn.com/larryosterman/archive/2005/05/10/416132.aspx#540057Mon, 27 Feb 2006 22:16:54 GMT91d46819-8472-40ad-a661-2c78acb4018c:540057Larry Osterman's WebLogWay back in the day, back when we were doing the initial threat models for the vista audio stack, I wrote...Threat Modeling, once againhttp://blogs.msdn.com/larryosterman/archive/2005/05/10/416132.aspx#4648631Thu, 30 Aug 2007 18:56:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:4648631Larry Osterman's WebLog<p>About 2.5 years ago, I wrote a series of articles about how we threat model at Microsoft, about 18 months</p> Threat Modeling Again, What does STRIDE have to do with threat modeling?http://blogs.msdn.com/larryosterman/archive/2005/05/10/416132.aspx#4811230Fri, 07 Sep 2007 17:52:51 GMT91d46819-8472-40ad-a661-2c78acb4018c:4811230Larry Osterman's WebLog<p>In my last couple of posts , I've talked about the STRIDE categories. As I mentioned, STRIDE provides</p>