freedomofpress / threat-modeling

experimental threat modeling tools
GNU General Public License v3.0
14 stars 1 forks source link

add to linter rules DFD inconsistencies #52

Open redshiftzero opened 3 years ago

redshiftzero commented 3 years ago

Examples:

redshiftzero commented 3 years ago

I was looking around for "DFD grammar" to see if there was a more formal set of DFD rules such that one could write a parser in order to flag issues like the above, and came across this: https://arxiv.org/pdf/1011.0278.pdf

See for example, definition 9 from that paper:

Definition 9: Syntax rules of data flow diagram: • At least one input data flow for a process • At least one output data flow for a process • Process from external entity cannot move directly to another external entity • At least one input data flow for a data store • At least one output data flow for a data store • Data from one data store cannot move directly to another data store