16. An apparatus for processing data, comprising: a communication interface; a storage device; and one or more processors in communication with said storage device and said communication interface, said one or more processors perform a method comprising, comparing application modeling data to an attack library, the application modeling data defines a business application, the definition including one or more business application components, one or more use cases, a use case includes a list of business application calls, a business application call in a given one of the use cases identifies a caller, first data affected by the call, an action taken by the caller with respect to the first data, and at least one of the components affected by the action of the caller, the comparing includes determining allowable actions based on the definitions of the business application calls in each of the use cases; automatically identifying attacks and threats associated with the business application based on said step of comparing, the automatically identifying attacks and threats includes determining unallowable actions based on the allowable actions, and generating a threat model associated with the business application, the threat model incorporating the attacks and threats.
16. An apparatus for processing data, comprising: a communication interface; a storage device; and one or more processors in communication with said storage device and said communication interface, said one or more processors perform a method comprising, comparing application modeling data to an attack library, the application modeling data defines a business application, the definition including one or more business application components, one or more use cases, a use case includes a list of business application calls, a business application call in a given one of the use cases identifies a caller, first data affected by the call, an action taken by the caller with respect to the first data, and at least one of the components affected by the action of the caller, the comparing includes determining allowable actions based on the definitions of the business application calls in each of the use cases; automatically identifying attacks and threats associated with the business application based on said step of comparing, the automatically identifying attacks and threats includes determining unallowable actions based on the allowable actions, and generating a threat model associated with the business application, the threat model incorporating the attacks and threats. 20. The apparatus of claim 16 , further comprising receiving the application modeling data in a user interface.