There are some threat modeling tools out there -- Microsoft has one (although I haven't used it) at http://www.microsoft.com/security/sdl/getstarted/threatmodel

There are some threat modeling tools out there -- Microsoft has one (although I haven't used it) at http://www.microsoft.com/security/sdl/getstarted/threatmodeling.aspx http://www.microsoft.com/security/sdl/getstarted/threatmodel... (there are also soime good links on the right). or it can be less formal, like the EOP game http://www.microsoft.com/security/sdl/eop.aspx http://www.microsoft.com/security/sdl/eop.aspx pencil and paper works well for doing an initial threat model, although not for sharing it and evolving it over time. threat modeling does have some project management and QA aspects (it's a good basis for generating a security testing plan) ... it's also very educational in helping developers learn to think about things from a security perspective.