May 24, 2004

Microsoft releases new Threat Modeling Tool

I have been waiting patiently for a few months now for Microsoft to release a book written by Frank Swiderski on Threat Modeling.

Imagine my surprise when I heard that Frank has written an actual tool to make the process of working on threat model documents easier!

The Threat Modeling Tool allows users to create threat model documents for applications. It organizes relevant data points, such as entry points, assets, trust levels, data flow diagrams, threats, threat trees, and vulnerabilities into an easy-to-use tree-based view. The tool saves the document as XML, and will export to HTML and MHT using the included XSLTs, or a custom transform supplied by the user.

This looks like a great tool. Time to go download it now!

Posted by SilverStr at May 24, 2004 08:15 PM | TrackBack