APPSEC Cali 2018 - Threat Modeling Toolkit

[@RoyObrecht]

Very useful and pragmatic approach Jonathan Marcil. Well done.

[@aceharun1]

Very useful video. Thank you!

[@Rookey_Traveller]

Thanks for your help. Is there any open source tool for DREAD methodology?

[@tonyuv5062]

DREAD is a discontinued risk categorization mnemonic and not a threat modeling methodology. Currently there are no tools that embellish its risk categorization silos.

[@strayapanda7552]

is there any programmatic tool to create the DFD?

[@jebinsebastian3201]

SeaSponge from Mozilla
OWASP Threat Dragon

[@jebinsebastian3201]

Microsoft Threat Modeling Tool