信息来源:邪恶八进制信息安全团队(
www.eviloctal.com)
Microsoft Threat Analysis & Modeling tool allows non-security subject matter experts to enter already known information including business requirements and application architecture which is then used to produce a feature-rich threat model. Along with automatically identifying threats, the tool can produce valuable security artifacts such as: - Data access control matrix - Component access control matrix - Subject-object matrix - Data Flow - Call Flow - Trust Flow - Attack Surface - Focused reports
Homepage
http://www.microsoft.com/downloa ... 19b491dd&displa