Awesome Lists

awesome-threat-modelling

by hysnsec

awesome listDockerfilepushed about 2 years ago

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

AI summary

Threat Modeling Guide

A curated list of threat modeling resources to learn and apply threat modeling skills in software development

stars
1.4K
forks
262
watching
68
awesome list
1
entries
6
View on GitHubwww.practical-devsecops.com/devsecops-university

Embed the badge

Show how many awesome lists link to your project. The count updates automatically.

Awesome Lists badge
Markdown
[![Awesome Lists Badge](https://awesome.facts.dev/shield/hysnsec/awesome-threat-modelling/links.svg)](https://awesome.facts.dev/awesome/hysnsec/awesome-threat-modelling)
HTML
<a href="https://awesome.facts.dev/awesome/hysnsec/awesome-threat-modelling"><img src="https://awesome.facts.dev/shield/hysnsec/awesome-threat-modelling/links.svg" alt="Awesome Lists Badge" /></a>
Image URL
https://awesome.facts.dev/shield/hysnsec/awesome-threat-modelling/links.svg

What's in the list

6 links in 2 sections, with live GitHub stats.activeno commit in 2y

Fundamentals

Tools / Paid tools

  • Irius risk

    Iriusrisk is a threat modeling tool with an adaptive questionnaire driven by an expert system which guides the user through straight forward questions about the technical architecture, the planned features and security context of the application

  • SD elements

    Automate Threat Modeling with SD Elements

  • Foreseeti

    SecuriCAD Vanguard is an attack simulation and automated threat modeling SaaS service that enables you to automatically simulate attacks on a virtual model of your AWS environment

  • Tutamen Threat Model system

    This tool allows threat model metadata to be added to any software diagram, turning that diagram into a threat model. It's simple to use, requires no lock-in license, and is driven by the Common Weakness Enumeration, STRIDE and OWASP Top 10

  • YAKINDU Security Analyst

    YAKINDU Security Analyst is a model-based software tool for threat analysis and risk assessment of technical systems. You can identify your protection needs, analyze possible threats and calculate the resulting risks. The underlying assessment model and calculation logic are highly customizable and can be integrated into existing toolchains

Add a GitHub project

Missing a project or an awesome list? Paste its GitHub URL and we fetch it right away.