Microsoft Threat Analysis and Modeling Tool v2 reaches RTM

I have been using Frank Swiderski's original Threat Modeling tool for some time. If you search for "threat model" on my blog you will see plenty of stuff over the last few years on how Microsoft has matured the whole process, and how I have matured in my understanding of that process at the same time. Well, I am pleased to announce that alongside their maturing in the threat modeling process, they have gone out of their way to make the original threat modeling tool 100x better.

I am just floored by the release of the RTM version of the Threat Analysis and Modeling Tool v2.0. You would be amazed about some of the features in this version of the tool. Taking the bulleted list from Anil's post over on the Threat Modeling Team blog, check out some of these features:

• TreeView Navigation with visibility to all nodes at all times
  
• Wizard based threat model creation
  
• Default Attack library with descriptive countermeasure guidance
  
• Automatic Threats and Use Cases generation
  
• Consolidated Call Flow (System Flow), Attack Surface, Threat Tree are some of the few visualizations available, which can all be exported to Visio
  
• Exportable Analytics and Reports to HTML
  
• mport v1.0 Threat Model (models created using Torpedo v1)
  
• Export countermeasures and attack test cases to Visual Studio Team Foundation Server (TFS)
  
• Import SDM Deployment Reports from VSTA
  
• Copy Paste and Drag-&-Drop features
  
• Enhanced Find Feature
  
• Video Tutorials

It's the last bullet that just pushed it over the edge for me. When you download and install this tool (and you REALLY should), make sure you go through the Video Tutorials. The Launchpad that starts with the tool has in depth video tutorials ranging from the reason why to threat model to instructions on just how to approach it. You owe it to yourself to spend a bit of time and go through each tutorial.

On top of that, the UI is beautiful. Compared to the original tool, its just amazingly slick. And a few of the bugs I talked to Frank about are finally fixed! When you build your first threat model using this of the tool, make sure you use the Wizard. Microsoft has done a great job to simplify the whole threat modeling process through that tool.

Great job Microsoft. Kudos to the ACE Services group for completing an excellent rewrite of the Threat Analysis and Modeling Tool for us.