Bei Channel9 gibt es die "Input Validation Training Modules", in welchen folgende (ASP.NET 2.0)Security-Themen in Screen Recordings (je ca. 5-10 Min. lang) behandelt werden:

• Canonicalization
• Cookies
• Cross-Site Scripting
• Regular Expressions
• SQL Injection
• Validation Controls

Für jedes Thema steht der entsprechende Source-Code zum Download bereit sowie Links zu existierenden Microsoft Guidances zum jeweiligen Thema.

There many articles discussing Web Application Security at the german MSDN online.

At least two of them ("Bedrohungen und Gegenmaßnahmen" and "Bedrohungsanalyse") are covering Threat Modeling.

If the Thread Modeling Slides from the NCC 2005A whetted your appetite, you may be interested in this one:

"Threat Modeling Web Applications" is a guidance which covers the following issues:

• At a Glance: Web Application Threat Model
• How To: Create a Threat Model for a Web Application at Design Time
• Cheat Sheet: Web Application Security Frame
• Walkthrough: Creating a Threat Model for a Web Application
• Template: Web Application Threat Model
• Template Sample: Web Application Threat Model

And don't forget to take a look at the free "Threat Modeling Tool" which may alleviate the work of creating a threat model.