Threat Modeling Whitepapers from Shostack + Associates
shostack.org/resources/whitepapersThe Four Question Framework for Threat Modeling takes a deep look at the specific design of the Four Questions. The questions provide a framework and language for effective threat modeling, and have been called "deceptively simple."