1. A method for generating a threat model for a business application, comprising: receiving application data associated with a business application; automatically generating threat information in response to the application data; and providing countermeasures associated with the threat information.