[Owasp-leaders] Mozilla Seasponge - a free online threat modelling tool

psiinon psiinon at gmail.com
Thu Apr 2 07:20:14 UTC 2015


SeaSponge threat model for the Tor Relay (
https://blog.mozilla.org/it/2015/01/28/deploying-tor-relays/) attached :)

Cheers,

Simon

On Wed, Apr 1, 2015 at 4:03 PM, psiinon <psiinon at gmail.com> wrote:

> I know we have at least one real model that was created here at Mozilla.
> We should be able to make it publicly available but I'm just double
> checking ;)
>
> On Tue, Mar 31, 2015 at 11:13 AM, Dinis Cruz <dinis.cruz at owasp.org> wrote:
>
>> Thx for sharing (definitely interesting to an owasp crowd)
>>
>> Do you know where we can find examples of complex (ie real world) models
>> build with this tool?
>>
>> I see where to load a model and create a new ones, but couldn't (easily)
>> find existing models
>> On 31 Mar 2015 10:18, "psiinon" <psiinon at gmail.com> wrote:
>>
>>> Some students have developed a free online threat modelling tool as part
>>> of the Mozilla Winter of Security:
>>>
>>>
>>> https://air.mozilla.org/mozilla-winter-of-security-seasponge-a-tool-for-easy-threat-modeling/
>>>
>>> You can try it out here: http://mozilla.github.io/seasponge/#/
>>>
>>> And the source code is here: https://github.com/mozilla/seasponge
>>>
>>> They would be very grateful for feedback / pull requests :)
>>>
>>> Hope you dont mind me plugging a non OWASP project on this list, but
>>> hopefully some of you will be interested in it...
>>>
>>> Cheers,
>>>
>>> Simon
>>>
>>> --
>>> OWASP ZAP <https://www.owasp.org/index.php/ZAP> Project leader
>>>
>>> _______________________________________________
>>> OWASP-Leaders mailing list
>>> OWASP-Leaders at lists.owasp.org
>>> https://lists.owasp.org/mailman/listinfo/owasp-leaders
>>>
>>>
>
>
> --
> OWASP ZAP <https://www.owasp.org/index.php/ZAP> Project leader
>



-- 
OWASP ZAP <https://www.owasp.org/index.php/ZAP> Project leader
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-leaders/attachments/20150402/20ef895b/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: TorRelayThreatModel.sponge
Type: application/octet-stream
Size: 18796 bytes
Desc: not available
URL: <http://lists.owasp.org/pipermail/owasp-leaders/attachments/20150402/20ef895b/attachment-0001.obj>


More information about the OWASP-Leaders mailing list