Threat Modeling Tools

This chapter describes some generally useful tools and how to apply them to threat modeling. It focuses on the open‐source tools that are available, followed by commercial tools. Microsoft Office contains a number of tools that are very useful in threat modeling. Word is a great tool for recording threats in free‐form. Whatever bug‐tracking system software developers use should also be used to track threats. A good bug from threat modeling can take many forms. A variety of open‐source tools for threat modeling are available. The open source tools illustrate some of the challenges in creating a high‐quality threat modeling tool. Elevation of Privilege is designed to be the easy way to get started threat modeling. It works by inviting individuals to participate in a game.