File Details |
|
| File Size | 16.5 MB |
|---|---|
| License | Freeware |
| Operating System | Windows XP |
| Date Added | July 20, 2009 |
| Total Downloads | 1,128 |
| Publisher | Microsoft Corp. |
| Homepage | Microsoft Threat Analysis & Modeling |
Publisher's Description
Microsoft Threat Analysis & Modeling tool allows non-security subject matter experts to enter already known information including business requirements and application architecture which is then used to produce a feature-rich threat model. Along with automatically identifying threats, the tool can produce valuable security artifacts such as Data access control matrix, Component access control matrix, Subject-object matrix, Data Flow, Call Flow, Trust Flow, Attack Surface and Focused reports.
Latest Reviews
Webprofusion reviewed v2.0 RC1 on May 25, 2006
It certainly does what it says. This is a wizard driven security threat checklist generator. You enter the types of application your developing, the roles invovles, the data types involved etc and it generates a checklist report of all the things you should be testing for and guarding against. Very comprehensive but very technical - could benefit from more/easier/softer help in the interface to make clear whats expected of the user. Very interesting.
Aloof reviewed v2.0 RC1 on May 25, 2006
"uh, what? Is that english?"
Uh, yes, and not *that* high of a level, either.
The MAZZTer reviewed v2.0 RC1 on May 24, 2006
No, it's businessese.
Hence the reason why I'm not trying it, and why we should have comments without ratings...
mjm01010101 reviewed v2.0 RC1 on May 24, 2006
"Microsoft Threat Analysis & Modeling tool allows non-security subject matter experts to enter already known information including business requirements and application architecture which is then used to produce a feature-rich threat model."
uh, what? Is that english?
Webprofusion reviewed v2.0 RC1 on May 25, 2006
It certainly does what it says. This is a wizard driven security threat checklist generator. You enter the types of application your developing, the roles invovles, the data types involved etc and it generates a checklist report of all the things you should be testing for and guarding against. Very comprehensive but very technical - could benefit from more/easier/softer help in the interface to make clear whats expected of the user. Very interesting.
Aloof reviewed v2.0 RC1 on May 25, 2006
"uh, what? Is that english?"
Uh, yes, and not *that* high of a level, either.
The MAZZTer reviewed v2.0 RC1 on May 24, 2006
No, it's businessese.
Hence the reason why I'm not trying it, and why we should have comments without ratings...
mjm01010101 reviewed v2.0 RC1 on May 24, 2006
"Microsoft Threat Analysis & Modeling tool allows non-security subject matter experts to enter already known information including business requirements and application architecture which is then used to produce a feature-rich threat model."
uh, what? Is that english?