search

izar / pytm

A Pythonic framework for threat modeling
Other
894 stars 169 forks source link

Automatic trust boundary detection? #23

Open colesmj opened 6 years ago

colesmj commented 6 years ago

I was wondering if we might make Boundary identification a capability of the tool, rather than letting a user define them in their object definitions. In other words, a user may decide to place a trust boundary based on particular characteristics, like team organizational units, or areas of control by teams, or based on a misunderstanding of the ability to enable trust relationships. But it should be possible for us to detect strong relationships between entities to establish, or at least hint at, trust boundaries, as a feature to the user.

izar commented 6 years ago

That's interesting! What could we use to derive the trust relationship - what would define a strong relationship between elements?

nineinchnick commented 3 years ago

I think assumming trust boundaries is at least dangerous or at best ambiguous.