Microsoft Threat Analysis and Modeing v 2.1 was just released.
Microsoft Threat Analysis & Modeling tool allows non-security subject matter experts to enter already known information including business requirements and application architecture which is then used to produce a feature-rich threat model. Along with automatically identifying threats, the tool can produce valuable security artifacts such as:
- Data access control matrix
- Component access control matrix
- Subject-object matrix
- Data Flow
- Call Flow
- Trust Flow
- Attack Surface
- Focused reports
Those who are interested may download the tool from:
http://www.microsoft.com/downloads/thankyou.aspx?familyId=59888078-9daf-4e96-b7d1-944703479451&displayLang=en
Monday, December 11, 2006
Microsoft Threat Analysis & Modeling v 2.1
Posted by Martin M at 8:43 AM
Subscribe to:
Post Comments (Atom)
0 Comments:
Post a Comment