Great post by my friend and colleague around threat modeling in a series he's doing on application security lifecycle.

 http://blogs.msdn.com/akshay_aggarwal/archive/2008/06/11/application-security-development-lifecycle-5a-is-threat-modeling-right-for-you.aspx

-Talhah