OWASP Threat Dragon is a threat modeling tool; great for both developers and defenders alike. Use on your desktop or as a web application.| owasp.org
Learn about the Microsoft Security Development Lifecycle (SDL) and how it can improve software development security.| www.microsoft.com