Secure Coding mailing list archives

Microsoft threat modeling tool available for free


From: "Kenneth R. van Wyk" <Ken () KRvW com>
Date: Wed, 26 May 2004 20:58:09 +0100

Greetings,

Almost missed this one while I was out of the office for a couple days...  
Microsoft have announced the free availability of a threat modeling tool by 
Frank Swiderski, who is also writing a soon-to-be released book on threat 
modeling.  Details on the tool (warning: requires .NET framework to be 
installed) as well as the book are available at:

http://www.microsoft.com/downloads/details.aspx?FamilyID=62830f95-0e61-4f87-88a6-e7c663444ac1&displaylang=en

Has anyone here tested the tool yet?  Opinions?  I'm a firm believer that not 
enough effort is paid to the threat analysis process during the design phase, 
so any tool that makes that easier should be a good thing -- even if it 
doesn't run on my Debian/Sarge desktop system.  :-)

Cheers,

Ken van Wyk
-- 
KRvW Associates, LLC
http://www.KRvW.com




Current thread: