Guerrilla Threat Modelling (or ‘Threat Modeling’)
An interesting read on Guerrilla Threat Modelling (or ‘Threat Modeling’ if you’re American) by Peter Torr. This is a relatively old post, but still applies today. In addition, a good practice to implementing threat countermeasures is the STRIDE approach which is described in MSDN magazine.