search

OWASP / threat-dragon

An open source threat modeling tool from OWASP
https://owasp.org/www-project-threat-dragon/
Apache License 2.0
902 stars 244 forks source link

Support for logical grouping of processes and data stores #292

Closed kohlerbn closed 2 months ago

kohlerbn commented 2 years ago

Describe what problem your feature request solves Various processes and data stores can be grouped with a drawing object in order to show their logical association. For example, imagine a web server and database - should be represented as a process and a data store, but together are logically the server-side systems or the "application".

Describe the solution you'd like I'm thinking of some sort of a dotted line faded box that can wrap around current drawing objects to show their grouping.

Additional context None.

lreading commented 2 years ago

Hi @kohlerbn, thanks for opening the issue!

In version 2 (to be released some point next year), we've added a "box-style" trust boundary. The text that says "trust boundary" can be edited to say whatever it needs to (eg "backend").

https://github.com/OWASP/threat-dragon/issues/54#issuecomment-865085014

Do you think that this would satisfy that need for logical grouping of entities?

kohlerbn commented 2 years ago

Hi @lreading - that could work. But, typically trust zones mean something relevant to the threat model whereas what I was thinking of is more just a logical grouping. I am very excited for the trust zone boundaries though!

lreading commented 2 years ago

Thinking about this more, I can definitely see the difference between the logical grouping and trust boundaries. I think this would be a nice feature to add. It probably won't bee with the initial 2.0 release, but something that should be easy enough to add later. :smile:

github-actions[bot] commented 5 months ago

This issue is stale because it has been open for 6 months with no activity.

jgadsden commented 2 months ago

closing this as it is unlikely to be implemented