One alternative to a data flow diagram is a process flow diagram ... Microsoft has a free threat modeling tool available, and the OWASP Foundation has desktop and web app versions of its own ...

For targeted threat modeling, it may be helpful to create additional data flow diagrams to support a specific use case. One example would be a diagram that looks at authentication separate and apart ...