Following up on an earlier
post, the RTM of the Threat Analysis and Modeling Tool v. 2.0 has been
released by the
ACE Team (
blog RSS). You can read more about it
here on the
Threat Modeling blog (
RSS). In particular, these are the main features of the package:
- TreeView Navigation with visibility to all nodes at all times
- Wizard based threat model creation
- Default Attack library with descriptive countermeasure guidance
- Automatic Threats and Use Cases generation
- Consolidated Call Flow (System Flow), Attack Surface, Threat Tree are some of the few visualizations available, which can all be exported to Visio
- Exportable Analytics and Reports to HTML
- Import v1.0 Threat Model (models created using Torpedo v1)
- Export countermeasures and attack test cases to Visual Studio Team Foundation Server (TFS)
- Import SDM Deployment Reports from VSTA
- Copy Paste and Drag-&-Drop features
- Enhanced Find Feature
- Video TutorialsI have been using the tool and I really like it. I plan on using it for a couple of upcoming projects and I encourage you to take a look.