Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
From various assets and countermeasures to factoids, personas, and architectural components, you can enter or upload a diverse array of data related to security, usability, and requirements to uncover valuable insights, including the links between requirements and risks as well as the rationale behind persona traits. Since no single perspective can encompass the complexity of a system, you can effortlessly create 12 distinct views of your developing design that examine aspects such as people, risks, requirements, architecture, and even geographical location. Additionally, as your preliminary design progresses, you can automatically produce threat models like Data Flow Diagrams (DFDs). Utilize open-source intelligence regarding potential threats and viable security architectures to assess your attack surface effectively. Furthermore, you can visualize all the security, usability, and design factors related to the risks associated with your product and how they interact with one another. This comprehensive approach ensures a thorough understanding of your system's vulnerabilities and strengths.
Description
Threat modeling serves as a fundamental aspect of the Microsoft Security Development Lifecycle (SDL), acting as an engineering strategy aimed at uncovering potential threats, attacks, vulnerabilities, and countermeasures that may impact your application. This technique not only aids in the identification of risks but also influences the design of your application, aligns with your organization's security goals, and mitigates potential hazards. The Microsoft Threat Modeling Tool simplifies the process for developers by utilizing a standardized notation that helps visualize system components, data flows, and security boundaries. Additionally, it assists those involved in threat modeling by highlighting various classes of threats to consider, depending on the architectural design of their software. Crafted with the needs of non-security professionals in mind, this tool enhances accessibility for all developers, offering straightforward guidance on the creation and evaluation of threat models, ultimately fostering a more secure software development practice. By integrating threat modeling into their workflow, developers can proactively address security concerns before they escalate into serious issues.
API Access
Has API
API Access
Has API
Integrations
IriusRisk
Seeker
Pricing Details
Free
Free Trial
Free Version
Pricing Details
No price information available.
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
CAIRIS
Website
cairis.org
Vendor Details
Company Name
Microsoft
Founded
1975
Country
United States
Website
www.microsoft.com/en-us/securityengineering/sdl/threatmodeling
Product Features
Requirements Management
Automated Functional Sizing
Automated Requirements QA
Automated Test Generation
Automated Use Case Modeling
Change Management
Collaboration
History Tracking
Prioritization
Reporting
Status Reporting
Status Tracking
Summary Reports
Task Management
To-Do List
Traceability
User Defined Attributes