P&P Threat Modeling
Good addition to the process of Threat Modeling web applications (6 sections) with templates and a cheat sheet.
Threat Modeling Web Applications
This guidance presents the patterns & practices approach to creating threat models for Web applications. Threat modeling is an engineering technique you can use to help you identify threats, attacks, vulnerabilities, and countermeasures that could affect your application. You can use threat modeling to shape your application's design, meet your company's security objectives, and reduce risk.