This post originated from an RSS feed registered with .NET Buzz
by Robert Hurlbut.
Original Post: Threat Modeling Tool available
Feed Title: Robert Hurlbut's .Net Blog
Feed URL: http://www.asp.net/err404.htm?aspxerrorpath=/rhurlbut/Rss.aspx
Feed Description: Development with .Net, Rotor, Distributed Architectures, Security, Extreme Programming, and Databases
Finally, it has been posted - Frank Swiderski's Threat modeling tool is now available for free download on MSDN. From the blurb:
The Threat Modeling Tool allows users to create threat model documents for applications. It organizes relevant data points, such as entry points, assets, trust levels, data flow diagrams, threats, threat trees, and vulnerabilities into an easy-to-use tree-based view. The tool saves the document as XML, and will export to HTML and MHT using the included XSLTs, or a custom transform supplied by the user.
This is fantastic news! I am looking forward to using this while still waiting for Frank's and Window Synder's new Threat Modeling book to ship. Check out Frank's talk on Threat Modeling at Win-Dev later this year.