Threat modeling framework from Microsoft. Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege. Used during software design to find threats before they ship.
Want to actually apply concepts like this instead of just reading definitions?
Practice free on Zamlom