search

mozilla / seasponge

:pineapple: SeaSponge is an accessible threat modelling tool from Mozilla
http://mozilla.github.io/seasponge/
Mozilla Public License 2.0
278 stars 64 forks source link

Analyze STRIDE attributes among element interactions #11

Open Glavin001 opened 10 years ago

Glavin001 commented 10 years ago

STRIDE interactions give us insight on potential security flaws within a threat model. The application will generate threats based on these attributes.

Glavin001 commented 10 years ago

@Frozenfire92 what does a Threat look like attached to a Stencil? Does a Stencil have an array of Threat objects?

@rainbee2214 I am currently ( https://github.com/mozilla/seasponge/issues/10#issuecomment-60128312 ) missing the threats field in the BaseStencil class. Once we fully understand what is required we can implement the logic in the BaseStencil class for handling STRIDE and process the class field threats (array of threats?) for each stencil. We are getting close!