prioritized by descending order of overall risk value.
For Further Reading
Frank Swiderski and Window Snyder, Threat Modeling, (Microsoft Press, 2004).
P. Torr (Microsoft Corporation), Guerrilla Threat Modeling.