Methodologies have been developed to identify and model threats, attacks, and
vulnerabilities, including Microsoft Threat Modeling, the European Community’s
CORAS, PTA Technologies’ CTMM, the open source Trike methodology, USC’s TMAP, and SEI’s OCTAVE, all of which are discussed in Section 5.2.3.1.
For Further Reading