Insecure Design

Threat Desired property
Spoofing Authenticity
Tampering Integrity
Repudiation Non-repudiability
Information Disclosure Confidentiality
Denial of Service Availability
Elevation of Privilege Authorization

Created in 1999 by two Microsoft security researchers, STRIDE remains a useful approach to categorizing potential issues.