corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a087df-93b2-73b3-97af-96533ae4690a

The Enchiridion of Impetus Exemplar

Shellsharks · published 30 July 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at shellsharks.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
354
Words captured
17,018

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.threatmodelingmanifesto.org
threatmodelingmanifesto.org
https://www.synopsys.com/company.html
synopsys.com
https://www.synopsys.com/glossary/what-is-threat-modeling.html
synopsys.com
https://www.synopsys.com/blogs/software-security/secure-sdlc/
synopsys.com
https://owasp.org/www-project-application-security-verification-standard/
owasp.org
https://controlcatalog.trustoncloud.com/
controlcatalog.trustoncloud.com
https://trustoncloud.com/introducing-controlcatalog-improving-the-user-experience-from-our-160-pages-threatmodel-on-amazon-s3-to-a-reactive-ui/
trustoncloud.com
https://github.com/trustoncloud/threatmodel-for-aws-s3
github.com
https://controlsframework.equifax.com/home
controlsframework.equifax.com
https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final
csrc.nist.gov
https://d3fend.mitre.org
d3fend.mitre.org
https://www.linddun.org/mitigation-strategies-and-solutions
linddun.org
https://www.security4startups.com/controls-checklist/
security4startups.com
https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04232020.pdf
nvlpubs.nist.gov
https://www.nist.gov
nist.gov
https://www.bsimm.com/framework/software-security-development-lifecycle.html
bsimm.com
https://docs.microsoft.com/en-us/azure/security/develop/threat-modeling-tool-mitigations
docs.microsoft.com
https://patents.google.com/patent/US7818788
patents.google.com
https://atlas.mitre.org/
atlas.mitre.org
https://attack.mitre.org
attack.mitre.org
https://capec.mitre.org/about/attack_comparison.html
capec.mitre.org
https://microsoft.github.io/Azure-Threat-Research-Matrix/
microsoft.github.io
https://capec.mitre.org
capec.mitre.org
https://threats.wiz.io
threats.wiz.io
https://www.exploit-db.com
exploit-db.com
https://cve.mitre.org
cve.mitre.org
https://fight.mitre.org
fight.mitre.org
https://ctid.mitre.org/fraud
ctid.mitre.org
https://cloudsecurityalliance.org/blog/2025/02/06/agentic-ai-threat-modeling-framework-maestro
cloudsecurityalliance.org
https://pbom.dev/
pbom.dev
https://owasp.org/www-project-top-ten/
owasp.org
https://plot4.ai
plot4.ai
https://pr3tack.org
pr3tack.org
https://sap.github.io/risk-explorer-for-software-supply-chains/
sap.github.io
https://spaceshield.esa.int
spaceshield.esa.int
https://www.microsoft.com/en-us/msrc
microsoft.com
https://trustoncloud.com/the-last-s3-security-document-that-well-ever-need/
trustoncloud.com
https://shellsharks.com/infosec-tools
shellsharks.com
https://www.cloudvulndb.org/
cloudvulndb.org
https://notcve.org/
notcve.org
https://www.cve.org/
cve.org
https://cwe.mitre.org
cwe.mitre.org
https://shellsharks.com/designer-vulnerabilities
shellsharks.com
https://euvd.enisa.europa.eu/
euvd.enisa.europa.eu
https://gcve.eu/
gcve.eu
https://github.com/RogoLabs/GhostCVEs/tree/main
github.com
https://globalcve.xyz
globalcve.xyz
https://gsd.id
gsd.id
https://go.dev/security/vuln/
go.dev
https://go.dev
go.dev
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
cisa.gov
https://www.cisa.gov
cisa.gov
https://lve-project.org/index.html
lve-project.org
https://nvd.nist.gov
nvd.nist.gov
https://csrc.nist.gov/projects/security-content-automation-protocol
csrc.nist.gov
https://cve.mitre.org/about/cve_and_nvd_relationship.html
cve.mitre.org
https://www.cloudvulndb.org
cloudvulndb.org
https://cloudsecurityalliance.org/blog/2020/04/30/what-is-a-cloud-service-provider/
cloudsecurityalliance.org
https://www.opencve.io
opencve.io
https://osv.dev/
osv.dev
https://rustsec.org
rustsec.org
https://security.snyk.io
security.snyk.io
https://snyk.io
snyk.io
https://vuldb.com
vuldb.com
https://vulnerablemcp.info/
vulnerablemcp.info
https://wpscan.com/plugins/
wpscan.com
https://www.nist.gov/itl/ai-risk-management-framework
nist.gov
https://aivss.parthsohaney.online/
aivss.parthsohaney.online
https://nvlpubs.nist.gov/nistpubs/ir/2012/NIST.IR.7864.pdf
nvlpubs.nist.gov
https://nvd.nist.gov/vuln-metrics/cvss
nvd.nist.gov
https://nvd.nist.gov/vuln-metrics/cvss/v2-calculator
nvd.nist.gov
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator
nvd.nist.gov
https://nvd.nist.gov/vuln-metrics/cvss/v4-calculator
nvd.nist.gov
https://www.ssi.gouv.fr/guide/ebios-risk-manager-the-method/
ssi.gouv.fr
https://www.ssi.gouv.fr/
ssi.gouv.fr
https://club-ebios.org/site/en/welcome/
club-ebios.org
https://www.first.org/epss/
first.org
https://www.fairinstitute.org/what-is-fair
fairinstitute.org
https://web.archive.org/web/20141118061526/http://www.riskmanagementinsight.com/media/docs/FAIR_introduction.pdf
web.archive.org
https://cyber.gc.ca/en/tools-services/harmonized-tra-methodology
cyber.gc.ca
https://cyber.gc.ca/en
cyber.gc.ca
https://www.researchgate.net/publication/233644703_Mission_Oriented_Risk_and_Design_Analysis_of_Critical_Information_Systems
researchgate.net
https://infosec.mozilla.org/guidelines/assessing_security_risk
infosec.mozilla.org
https://infosec.mozilla.org
infosec.mozilla.org
https://infosec.mozilla.org/guidelines/risk/rapid_risk_assessment.html
infosec.mozilla.org
https://owasp.org/www-community/OWASP_Risk_Rating_Methodology
owasp.org
https://owasp.org
owasp.org
https://www.owasp-risk-rating.com
owasp-risk-rating.com
https://riskscore.info
riskscore.info
https://csrc.nist.gov/publications/detail/sp/800-30/rev-1/final
csrc.nist.gov
https://sscv-framework.org/
sscv-framework.org
https://www.cisa.gov/ssvc
cisa.gov
https://media10.connectedsocialmedia.com/intel/10/5725/Intel_IT_Business_Value_Prioritizing_Info_Security_Risks_with_TARA.pdf
media10.connectedsocialmedia.com
https://viss.zoom.com
viss.zoom.com
https://www.microsoft.com/en-us/securityengineering/sdl/threatmodeling
microsoft.com
https://www.microsoft.com
microsoft.com
https://www.microsoft.com/en-us/securityengineering/sdl/
microsoft.com
https://www.microsoft.com/en-us/securityengineering/sdl/practices
microsoft.com
https://www.microsoft.com/
microsoft.com
https://github.blog/2020-09-02-how-we-threat-model/
github.blog
https://news.microsoft.com/announcement/microsoft-acquires-github/
news.microsoft.com
https://docs.microsoft.com/en-us/archive/msdn-magazine/2006/november/uncover-security-design-flaws-using-the-stride-approach
docs.microsoft.com
https://docs.microsoft.com/en-us/windows-hardware/drivers/driversecurity/threat-modeling-for-drivers
docs.microsoft.com
https://www.wiley.com/en-us/Risk+Centric+Threat+Modeling%3A+Process+for+Attack+Simulation+and+Threat+Analysis-p-9780470500965
wiley.com
https://requirements.com/Content/What-is/what-are-business-requirements-1
requirements.com
https://www.geeksforgeeks.org/functional-vs-non-functional-requirements/
geeksforgeeks.org
https://www.sans.org/information-security-policy/
sans.org
https://en.wikipedia.org/wiki/Governance,_risk_management,_and_compliance
en.wikipedia.org
https://digitalguardian.com/blog/what-data-classification-data-classification-definition
digitalguardian.com
https://asana.com/resources/business-objectives-examples
asana.com
https://resources.sei.cmu.edu/library/asset-view.cfm?assetid=484884
resources.sei.cmu.edu
https://www.ready.gov/business-impact-analysis
ready.gov
https://www.ready.gov/
ready.gov
https://www.congress.gov/bill/107th-congress/house-bill/3763
congress.gov
https://www.pcisecuritystandards.org
pcisecuritystandards.org
https://www.nist.gov/cyberframework
nist.gov
https://www.ssae-16.com
ssae-16.com
https://us.aicpa.org/content/dam/aicpa/research/standards/auditattest/downloadabledocuments/at-00101.pdf
us.aicpa.org
https://www.fedramp.gov
fedramp.gov
https://www.iso.org/isoiec-27001-information-security.html
iso.org
https://www.privacyshield.gov/list
privacyshield.gov
https://www.hhs.gov/hipaa/index.html
hhs.gov
https://www.hhs.gov/hipaa/for-professionals/special-topics/hitech-act-enforcement-interim-final-rule/index.html
hhs.gov
https://us.aicpa.org/interestareas/frc/assuranceadvisoryservices/aicpasoc2report
us.aicpa.org
https://www.defense.gov/News/Releases/Release/Article/2833006/strategic-direction-for-cybersecurity-maturity-model-certification-cmmc-program/
defense.gov
https://gdpr-info.eu
gdpr-info.eu
https://oag.ca.gov/privacy/ccpa
oag.ca.gov
https://www.ftc.gov/business-guidance/privacy-security/gramm-leach-bliley-act
ftc.gov
https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/
priv.gc.ca
https://www.cisa.gov/federal-information-security-modernization-act
cisa.gov
https://cloudsecurityalliance.org/star/
cloudsecurityalliance.org
https://www.isaca.org/resources/cobit
isaca.org
https://www2.ed.gov/policy/gen/guid/fpco/ferpa/index.html
www2.ed.gov
https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa
ftc.gov
https://www.nerc.com/comm/CIPC/Pages/default.aspx
nerc.com
https://www2.ed.gov/policy/highered/leg/hea08/index.html
www2.ed.gov
https://hitrustalliance.net
hitrustalliance.net
https://www.cloudflare.com/learning/access-management/authn-vs-authz/
cloudflare.com
https://www.lucidchart.com/blog/how-to-create-software-design-documents
lucidchart.com
https://www.usability.gov/how-to-and-tools/methods/use-cases.html
usability.gov
https://auth0.com/intro-to-iam/what-is-authorization/
auth0.com
https://csrc.nist.gov/publications/detail/sp/800-207/final
csrc.nist.gov
https://www.gartner.com/en/information-technology/glossary/security-information-and-event-management-siem
gartner.com
https://www.first.org/cvss/specification-document
first.org
https://carnegieendowment.org/2022/03/28/purposes-of-u.s.-government-public-cyber-attribution-pub-86696
carnegieendowment.org
https://attack.mitre.org/matrices/enterprise/
attack.mitre.org
https://www.fortinet.com/resources/cyberglossary/indicators-of-compromise
fortinet.com
https://hbr.org/2015/11/a-refresher-on-regression-analysis
hbr.org
https://cti-cmm.org
cti-cmm.org
https://warnerchad.medium.com/
warnerchad.medium.com
https://warnerchad.medium.com/diamond-model-for-cti-5aba5ba5585
warnerchad.medium.com
https://www.crowdstrike.com/cybersecurity-101/threat-intelligence/
crowdstrike.com
https://danielmiessler.com/blog/difference-data-information-intelligence/
danielmiessler.com
https://medium.com/katies-five-cents/a-cyber-threat-intelligence-self-study-plan-part-1-968b5a8daf9a
medium.com
https://medium.com/katies-five-cents/a-cyber-threat-intelligence-self-study-plan-part-2-d04b7a529d36
medium.com
https://start.me/p/wMrA5z/cyber-threat-intelligence
start.me
https://infosec.press/screaminggoat/attribution
infosec.press
https://attack.mitre.org/groups/
attack.mitre.org
https://adversary.crowdstrike.com/
adversary.crowdstrike.com
https://www.dragos.com/threat-activity-groups/
dragos.com
https://www.mandiant.com/resources/insights/advanced-persistent-threats-apts
mandiant.com
https://www.cfr.org/cyber-operations/
cfr.org
https://blog.google/threat-analysis-group/
blog.google
https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming
learn.microsoft.com
https://www.secureworks.com/research/threat-profiles
secureworks.com
https://www.misp-project.org
misp-project.org
https://www.opencti.io/
opencti.io
https://ifin-intel.org
ifin-intel.org
https://www.verizon.com/business/resources/reports/dbir/
verizon.com
https://www.cisa.gov/uscert/
cisa.gov
https://www.cisa.gov/topics/cyber-threats-and-advisories/information-sharing/automated-indicator-sharing-ais
cisa.gov
https://isc.sans.edu/data/threatfeed.html
isc.sans.edu
https://www.mcafee.com/enterprise/en-us/threat-center/threat-landscape-dashboard/campaigns-details.operation-finsho.html
mcafee.com
https://community.emergingthreats.net
community.emergingthreats.net
https://rules.emergingthreats.net
rules.emergingthreats.net
https://apt.threattracking.com
apt.threattracking.com
https://pan-unit42.github.io/playbook_viewer/
pan-unit42.github.io
https://otx.alienvault.com
otx.alienvault.com
https://apt.etda.or.th/cgi-bin/aptsearch.cgi
apt.etda.or.th
https://github.com/MISP/misp-galaxy/blob/main/clusters/threat-actor.json
github.com
https://talosintelligence.com
talosintelligence.com
https://threatconnect.com/partner/r-cisc/
threatconnect.com
https://www.infragard.org
infragard.org
https://www.blocklist.de/en/index.html
blocklist.de
https://phishtank.org
phishtank.org
https://cinsscore.com
cinsscore.com
https://www.spamhaus.org
spamhaus.org
https://virusshare.com
virusshare.com
https://safebrowsing.google.com
safebrowsing.google.com
https://www.synopsys.com/blogs/software-security/5-pillars-successful-threat-model/
synopsys.com
Orchestrating Enterprise Vulnerability Triage Read at the source ↗
shellsharks.com
https://cheatsheetseries.owasp.org/cheatsheets/Abuse_Case_Cheat_Sheet.html
cheatsheetseries.owasp.org
https://www.crowdstrike.com/cybersecurity-101/attack-surface-management/
crowdstrike.com
https://hbr.org/1964/07/decision-trees-for-decision-making
hbr.org
https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8429296
ieeexplore.ieee.org
http://dcsl.cs.ua.edu/papers/SAM9712.pdf
dcsl.cs.ua.edu
https://www.diva-portal.org/smash/get/diva2:1463788/FULLTEXT01.pdf
diva-portal.org
https://www.kth.se/
kth.se
https://versprite.com/
versprite.com
https://versprite.com/blog/application-security/threat-modeling/organizational-threat-model-enterprise-risk-assessment/
versprite.com
https://versprite.com/author/tony-ucedavelez/
versprite.com
https://versprite.com
versprite.com
https://gitlab.com/gitlab-com/gl-security/security-research/gitlab-standalone-instance/-/blob/master/threat-modeling-assessment.md
gitlab.com
https://about.gitlab.com/handbook/security/threat_modeling/
about.gitlab.com
https://resources.sei.cmu.edu/library/asset-view.cfm?assetid=13473
resources.sei.cmu.edu
https://resources.sei.cmu.edu/asset_files/TechnicalReport/1999_005_001_16769.pdf
resources.sei.cmu.edu
https://www.sei.cmu.edu
sei.cmu.edu
https://www.sei.cmu.edu/
sei.cmu.edu
https://resources.sei.cmu.edu/asset_files/handbook/2005_002_001_14273.pdf
resources.sei.cmu.edu
https://resources.sei.cmu.edu/asset_files/TechnicalReport/2007_005_001_14885.pdf
resources.sei.cmu.edu
https://www.investopedia.com/terms/r/returnoninvestment.asp
investopedia.com
http://www.octotrike.org
octotrike.org
https://github.com/octotrike/trike
github.com
http://www.octotrike.org/tools.html
octotrike.org
http://www.octotrike.org/papers/Trike_v1_Methodology_Document-draft.pdf
octotrike.org
http://sourceforge.net/apps/trac/trike/browser/spreadsheet/trunk/docs/help/TrikeHelp.xlsx
sourceforge.net
https://github.com/shellsharks/assorted/blob/master/resources/trike-actor-asset-action-matrix.xlsx
github.com
https://github.com/shellsharks/assorted/blob/master/resources/trike-risk-calculator.xlsx
github.com
https://en.wikipedia.org/wiki/Finite-state_machine
en.wikipedia.org
http://www.octotrike.org/contact
octotrike.org
http://www.octotrike.org/tools
octotrike.org
http://www.octotrike.org/talks
octotrike.org
https://sourceforge.net/projects/trike/files/trike/1.1.2a/
sourceforge.net
http://sourceforge.net
sourceforge.net
http://www.octotrike.org/faq
octotrike.org
https://www.linddun.org
linddun.org
https://people.cs.kuleuven.be/~kim.wuyts/LINDDUN/LINDDUN.pdf
people.cs.kuleuven.be
https://www.linddun.org/linddun
linddun.org
https://www.linddun.org/linkability
linddun.org
https://www.linddun.org/identifiability-1
linddun.org
https://www.linddun.org/non-repudiation
linddun.org
https://www.linddun.org/detectability
linddun.org
https://www.linddun.org/disclosure-of-information
linddun.org
https://www.linddun.org/unawareness
linddun.org
https://www.linddun.org/non-compliance
linddun.org
https://www.linddun.org/about
linddun.org
https://www.linddun.org/downloads
linddun.org
https://www.linddun.org/linddun-threat-catalog
linddun.org
https://go.threatmodeler.com/threat-modeling-methodologies
go.threatmodeler.com
https://threatmodeler.com/
threatmodeler.com
https://threatmodeler.com/scalable-threat-modeling-practice/
threatmodeler.com
https://www.agilealliance.org/agile101/
agilealliance.org
https://threatmodeler.com/operational-application-threat-modeling/
threatmodeler.com
https://threatmodeler.com/threatmodeler/
threatmodeler.com
https://about.gitlab.com/topics/devops/
about.gitlab.com
https://www.schneier.com/news/archives/2012/12/complexity_the_worst.html
schneier.com
https://threatmodeler.com
threatmodeler.com
https://csrc.nist.gov/publications/detail/sp/800-154/draft
csrc.nist.gov
https://csrc.nist.gov/CSRC/media/Publications/sp/800-154/draft/documents/sp800_154_draft.pdf
csrc.nist.gov
https://csrc.nist.gov/publications/detail/sp/800-60/vol-1-rev-1/final
csrc.nist.gov
https://nvlpubs.nist.gov/nistpubs/fips/nist.fips.199.pdf
nvlpubs.nist.gov
https://owasp.org/
owasp.org
https://owasp.org/www-community/Threat_Modeling_Process
owasp.org
https://github.com/OWASP/threat-modeling-playbook
github.com
https://owasp.org/www-pdf-archive/OWASP_Code_Review_Guide-V1_1.pdf
owasp.org
https://docs.microsoft.com/en-us/microsoft-365/security/intelligence/supply-chain-malware
docs.microsoft.com
https://www.mandiant.com/resources/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor
mandiant.com
https://docs.microsoft.com/en-us/archive/blogs/david_leblanc/dreadful
docs.microsoft.com
https://www.mitre.org/news-insights/publication/threat-assessment-and-remediation-analysis-tara
mitre.org
https://www.mitre.org/sites/default/files/2021-10/pr-14-2359-tara-introduction-and-overview.pdf
mitre.org
https://www.mitre.org/
mitre.org
https://www.mitre.org/publications/systems-engineering-guide/enterprise-engineering/systems-engineering-for-mission-assurance/crown-jewels-analysis
mitre.org
https://en.wikipedia.org/wiki/Risk_matrix
en.wikipedia.org
https://policy.defense.gov/Portals/11/Documents/MA_Strategy_Final_7May12.pdf
policy.defense.gov
https://www.lockheedmartin.com/content/dam/lockheed-martin/rms/documents/cyber/LM-White-Paper-Threat-Driven-Approach.pdf
lockheedmartin.com
https://www.lockheedmartin.com
lockheedmartin.com
https://www.lockheedmartin.com/en-us/capabilities/cyber/cyber-kill-chain.html
lockheedmartin.com
https://resources.sei.cmu.edu/library/asset-view.cfm?assetid=516617
resources.sei.cmu.edu
https://resources.sei.cmu.edu/asset_files/TechnicalNote/2018_004_001_516627.pdf
resources.sei.cmu.edu
https://resources.sei.cmu.edu/asset_files/WhitePaper/2013_019_001_297333.pdf
resources.sei.cmu.edu
http://securitycards.cs.washington.edu/index.html
securitycards.cs.washington.edu
https://www.washington.edu
washington.edu
http://securitycards.cs.washington.edu/cards.html
securitycards.cs.washington.edu
http://securitycards.cs.washington.edu/activities.html
securitycards.cs.washington.edu
https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=6834694
ieeexplore.ieee.org
https://www.linkedin.com/in/jane-cleland-huang-2786224/
linkedin.com
https://www.cdm.depaul.edu/academics/Pages/MS-in-Software-Engineering.aspx
cdm.depaul.edu
https://en.wikipedia.org/wiki/Persona_non_grata
en.wikipedia.org
https://en.wikipedia.org/wiki/Logic_bomb
en.wikipedia.org
https://www.digitalshadows.com/blog-and-research/rise-of-initial-access-brokers/
digitalshadows.com
https://www.tu-darmstadt.de
tu-darmstadt.de
https://www.goethe-university-frankfurt.de/
goethe-university-frankfurt.de
https://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.348.6943&rep=rep1&type=pdf
citeseerx.ist.psu.edu
https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A31995L0046
eur-lex.europa.eu
https://sourceforge.net/projects/seamonster/?source=navbar
sourceforge.net
https://shellsharks.com/about?about=infosec
shellsharks.com
Using MAESTRO to Secure Agentic AI Read at the source ↗
shellsharks.com
https://github.com/Autodesk/continuous-threat-modeling
github.com
https://www.youtube.com/watch?v=VbW-X0j35gw
youtube.com
https://www.mitre.org/news-insights/news-release/mitre-red-balloon-security-and-narf-announce-emb3d
mitre.org
https://arxiv.org/html/2502.07116v1
arxiv.org
https://www.omadahealth.com/hubfs/nodirt.pdf
omadahealth.com
http://www.pentest-standard.org/index.php/Threat_Modeling
pentest-standard.org
https://shellsharks.com/
shellsharks.com
https://www.synopsys.com/
synopsys.com
https://docs.microsoft.com/en-us/azure/security/develop/threat-modeling-tool-getting-started
docs.microsoft.com
https://threatdragon.github.io
threatdragon.github.io
https://github.com/OWASP/threat-dragon/releases
github.com
https://github.com/izar/pytm
github.com
https://app.diagrams.net
app.diagrams.net
https://threagile.io
threagile.io
https://github.com/threagile
github.com
https://cairis.org
cairis.org
https://github.com/cairis-platform/cairis
github.com
https://www.iriusrisk.com/threat-modeling-platform
iriusrisk.com
https://foreseeti.com/securicad-enterprise/
foreseeti.com
https://www.tutamantic.com
tutamantic.com
https://threatcl.github.io
threatcl.github.io
https://threatsmanager.com
threatsmanager.com
https://github.com/threatspec/threatspec
github.com
https://c4model.com
c4model.com
https://mermaid.live/
mermaid.live
https://structurizr.com
structurizr.com
https://diagrams.mingrammer.com
diagrams.mingrammer.com
https://plantuml.com
plantuml.com
https://forktm.com
forktm.com
http://satoss.uni.lu/members/piotr/adtool/
satoss.uni.lu
https://github.com/yathuvaran/AT-AT
github.com
https://github.com/jimmythompson/ent
github.com
https://www.isograph.com/software/attacktree/
isograph.com
https://www.amenaza.com/
amenaza.com
https://risktree.2t-security.co.uk
risktree.2t-security.co.uk
https://swagitda.com/blog/posts/deciduous-attack-tree-app/
swagitda.com
https://illuminated-security.com/threat-modelling-workbook-2/
illuminated-security.com
https://tsp.cs.tufts.edu/tmnt/IntroThreatModeling.html
tsp.cs.tufts.edu
https://csrc.nist.gov/glossary/term/access_control_matrix
csrc.nist.gov
https://owasp.org/www-community/Threat_Modeling
owasp.org
https://www.lucidchart.com/pages/process-flow-diagrams
lucidchart.com
https://owasp.org/www-pdf-archive/AppSecEU2012_PASTA.pdf
owasp.org
https://www.robertmlee.org/cyber-intelligence-part-5-cyber-threat-intelligence/
robertmlee.org
https://2017.appsec.eu/presos/CISO/Threat%20Modeling%20with%20PASTA%20-%20Risk%20Centric%20Application%20Threat%20Modeling%20Case%20Studies%20-%20Tony%20UcedaVélez%20-%20OWASP_AppSec-Eu_2017.pdf
2017.appsec.eu
https://www.schneier.com/academic/archives/1999/12/attack_trees.html
schneier.com
https://www.amenaza.com/AT-whatAre.php
amenaza.com
https://www.spiceworks.com/it-security/vulnerability-management/articles/top-threat-modeling-tools/
spiceworks.com
https://csrc.nist.gov/glossary/
csrc.nist.gov
https://www.mitre.org/publications/technical-papers/threat-assessment-and-remediation-analysis-tara
mitre.org
https://www.rapid7.com/fundamentals/compliance-regulatory-frameworks/
rapid7.com
https://www.itgovernanceusa.com/compliance
itgovernanceusa.com
https://github.com/hysnsec/awesome-threat-modelling
github.com
https://insights.sei.cmu.edu/blog/threat-modeling-12-available-methods/
insights.sei.cmu.edu
https://www.mitre.org/sites/default/files/publications/pr_18-1174-ngci-cyber-threat-modeling.pdf
mitre.org
https://shostack.org/books/threat-modeling-book
shostack.org
https://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.103.2997&rep=rep1&type=pdf
citeseerx.ist.psu.edu
https://resources.sei.cmu.edu/library/asset-view.cfm?assetid=7657
resources.sei.cmu.edu
https://www.theseus.fi/bitstream/handle/10024/220967/Selin_Juuso.pdf?sequence=2
theseus.fi
https://www.ten-inc.com/presentations/invincea1.pdf
ten-inc.com
https://simoneonsecurity.com
simoneonsecurity.com
https://simoneonsecurity.files.wordpress.com/2021/03/evolving-threat-modeling.pdf
simoneonsecurity.files.wordpress.com
https://www.youtube.com/watch?v=N5icvgTyg7k
youtube.com
https://segment.com/blog/redefining-threat-modeling/
segment.com
https://shostack.org/files/essays/uncover/
shostack.org
https://github.com/arnepadmos/threats/
github.com
https://www.threatmodelingconnect.com
threatmodelingconnect.com
https://www.microsoft.com/en-us/security/blog/2026/02/26/threat-modeling-ai-applications/
microsoft.com