Threat Modeling
Threat modeling — start here
Rather than restate it worse, this section points you to the authoritative primary resources. Model the system, enumerate threats, decide mitigations, and iterate.
OWASP Threat Modeling (community page)The canonical overview: what threat modeling is and the process.OWASP Threat Modeling Cheat SheetA practical, structured how-to you can follow step by step.The Threat Modeling ManifestoValues and principles agreed by the field's practitioners.Microsoft — STRIDE threatsSTRIDE categories and the security properties they violate.Bruce Schneier — Attack TreesThe original write-up on decomposing an attacker's goal.
Curated external references. Threat modeling is covered thoroughly by the sources above; this page is a deliberate pointer, not a rewrite.