By way of Michael Howard:
Finally, it has been posted - Frank Swiderski's Threat modeling tool is now available for free download on MSDN. From the blurb:
The Threat Modeling Tool allows users to create threat model documents for applications. It organizes relevant data points, such as entry points, assets, trust levels, data flow diagrams, threats, threat trees, and vulnerabilities into an easy-to-use tree-based view. The tool saves the document as XML, and will export to HTML and MHT using the included XSLTs, or a custom transform supplied by the user.
This is fantastic news! I am looking forward to using this while still waiting for Frank's and Window Synder's new Threat Modeling book to ship. Check out Frank's talk on Threat Modeling at Win-Dev later this year.
