ABCs of Threat modeling ...
Larry Osterman has an interesting series of posts on Threat modeling.. It starts from the basics and is very comprehensive. A application needs to go through the threat modeling process to identify possible threats, the mitigations, and the risks involved. From a tester's perspective it opens up several testing scenarios. So if you are unfamiliar with this topic or its something which needs some brushing up, give the posts a look :) ... Happy reading
