Robert Hurlbut Blog

Thoughts on Software Security, Software Architecture, Software Development, and Agility

Threat Analysis and Modeling Tool v. 2.0 (RTM) is available

Saturday, July 8, 2006 Comments

 .NET  ASP.NET  Personal  Security 
Share:   Share on LinkedIn    Share on Twitter    Share on Facebook   

Following up on an earlier post, the RTM of the Threat Analysis and Modeling Tool v. 2.0 has been released by the ACE Team (blog RSS). You can read more about it here on the Threat Modeling blog (RSS). In particular, these are the main features of the package:

   - TreeView Navigation with visibility to all nodes at all times
   - Wizard based threat model creation
   - Default Attack library with descriptive countermeasure guidance
   - Automatic Threats and Use Cases generation
   - Consolidated Call Flow (System Flow), Attack Surface, Threat Tree are some of the few visualizations available, which can all be exported to Visio
   - Exportable Analytics and Reports to HTML
   - Import v1.0 Threat Model (models created using Torpedo v1)
   - Export countermeasures and attack test cases to Visual Studio Team Foundation Server (TFS)
   - Import SDM Deployment Reports from VSTA
   - Copy Paste and Drag-&-Drop features
   - Enhanced Find Feature
   - Video Tutorials


I have been using the tool and I really like it. I plan on using it for a couple of upcoming projects and I encourage you to take a look.
Share:   Share on LinkedIn    Share on Twitter    Share on Facebook