Monday, March 27, 2006 9:39 PM bart

Microsoft Threat Analysis & Modeling 2.0 beta 2

For everyone out there caring about security (this filter clause should be a tautology) this blog post should be the trigger to a "start downloading immediately" action. So here's the link: http://www.microsoft.com/downloads/details.aspx?familyid=aa5589bd-fb2c-40cf-aec5-dc4319b491dd&displaylang=en. Formerly codenamed ACE Torpedo, the Microsoft Threat Analysis & Modeling tool allows non-security subject matter experts to enter already known information including business requirements and application architecture which is then used to produce a feature-rich threat model. Along with automatically identifying threats, the tool can produce valuable security artifacts such as:

- Data access control matrix
- Component access control matrix
- Subject-object matrix
- Data Flow
- Call Flow
- Trust Flow
- Attack Surface
- Focused reports

(Summary grabbed from download site)

Other links to bookmark in your favorites folder about security:

Del.icio.us | Digg It | Technorati | Blinklist | Furl | reddit | DotNetKicks

Filed under:

Comments

No Comments