Further reading

• ETSI TS 102 165-1 V4.2.1 (2006-12): Method and proforma for Threat, Risk, Vulnerability Analysis: http://www.etsi.org/deliver/etsi_ts/102100_102199/10216501/04.02.03_60/ts_10216501v040203p.pdf
• NIST 800-18 Guide for Developing Security Plans for Federal Information Systems: https://csrc.nist.gov/publications/detail/sp/800-18/rev-1/final
• ITU-T X.805 (10/2003) Security architecture for systems providing end-to-end communications: https://www.itu.int/rec/T-REC-X.805-200310-I/en
• Oauth2.0 Threat Model and Security Considerations: https://tools.ietf.org/html/rfc6819
• SafeCode Tactical Threat Modeling: https://safecode.org/safecodepublications/tactical-threat-modeling/
• OWASP Threat Risk Modeling: https://www.owasp.org/index.php/Threat_Risk_Modeling
• OCTAVE Allegro: Improving the Information Security Risk Assessment Process: https://resources.sei.cmu.edu/library/asset-view...