search

izar / pytm

A Pythonic framework for threat modeling
Other
861 stars 161 forks source link

Use RAAML for threat models #214

Open kuwv opened 1 year ago

kuwv commented 1 year ago

Model Based Systems Engineering (MBSE) typically uses SysML to interconnect models. The Risk Analysis and Assessment Modeling Language (RAAML) specification is a SysML compliant format that would allow integration with other modeling capabilities such as simulation.

Ideally, one would be able to switch between using PlantUML or SysML but the latter does more than visualization.

References: https://www.omg.org/spec/RAAML/1.0/Beta2/About-RAAML https://github.com/gaphor/gaphor https://github.com/OWASP/threat-dragon/issues/639 https://www.oreilly.com/library/view/threat-modeling/9781492056546/ch04.html

izar commented 1 year ago

so if I understand you correctly you are proposing RAAML as an additional output option for pytm?

kuwv commented 1 year ago

@izar yes as an alternative output format

izar commented 1 year ago

sounds great! I don't think any of the current collaborators is fluent in RAAML, is that something you could send a PR for?