OWASP Threat Dragon

OWASP Threat Dragon is a modeling tool used to create threat model diagrams as part of a secure development lifecycle. Threat Dragon follows the values and principles of the threat modeling manifesto. It can be used to record possible threats and decide on their mitigations, as well as giving a visual indication of the threat model components and threat surfaces.

owasp.org

nvlpubs.nist.gov

csrc.nist.gov

csrc.nist.gov

Threat Modeling Process

Author: Larry Conklin Contributor(s): Victoria Drake This document describes a structured approach to application threat modeling that enables you to identify, quantify, and address the security risks associated with an application. Threat modeling looks at a system from a potential attacker's perspective, as opposed to a defender's viewpoint.

owasp.org

Threat Modeling Guide

Cyber attacks come in many forms, and defending against these attacks can sometimes be challenging. We worry about national cyberspace security, network security, application security, data security, and everything in-between. What makes it difficult for the security professional is that the attacker can get in a thousand and one ways, and each potential entry point has to be secured.

www.comparitech.com

Walkthrough: Creating a Threat Model for a Web Application

J.D. Meier, Alex Mackman, Blaine Wastell This walkthrough shows you how a development team put threat modeling into practice. It describes how the team created a threat model for an Internet-facing Web application during the early stages of application design. The walkthrough describes what the team learned during the modeling process.

Threat Modeling

This content is outdated and is no longer being maintained. It is provided as a courtesy for individuals who are still using these technologies. This page may contain URLs that were valid when originally published, but now link to sites or pages that no longer exist. Improving Web Application Security: Threats and Countermeasures J.D.

docs.microsoft.com

tsapps.nist.gov

files.iota.org

www.mitre.org

www.mitre.org