Open source threat modeling tools
There are a few open source threat modeling tools available that can help organizations identify, categorize, and address security threats in a systematic way. Here’s an overview of a few notable ones:
- OWASP Threat Dragon (https://owasp.org/www-project-threat-dragon/)
Details: An online and desktop threat modeling tool from the Open Web Application Security Project (OWASP). It allows for the creation of threat models with drag-and-drop components.
Features:
- Supports both web-based and desktop-based environments
- Integrates with GitHub for versioning and storage
- Enables the creation of DFDs with a built-in threat and rule editor
Impact: Helps to identify security threats early in the design phase. By integrating with the SDLC, it allows for continuous threat modeling.
- Microsoft Threat Modeling Tool (https://learn.microsoft.com/en-us/azure/security/develop/threat-modeling-tool)
Details: Although not strictly open source, Microsoft’s...
