From b2d3feb53b3bcc72140fb9477635261d08113572 Mon Sep 17 00:00:00 2001 From: xntrik Date: Tue, 28 Sep 2021 15:22:32 +0800 Subject: [PATCH 1/4] Add Deciduous --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 4c92c3d..8f2db50 100644 --- a/README.md +++ b/README.md @@ -201,6 +201,8 @@ Contributions welcome. Add links through pull requests or create an issue to sta - [Threagile](https://github.com/Threagile/threagile) - Threagile is an open-source toolkit for agile threat modeling +- [Deciduous](https://github.com/rpetrich/deciduous) - A web app that simplifies building attack decision trees. Hosted at https://www.deciduous.app/ + ### Paid tools - [Irius risk](https://iriusrisk.com/threat-modeling-tool/) - Iriusrisk is a threat modeling tool with an adaptive questionnaire driven by an expert system which guides the user through straight forward questions about the technical architecture, the planned features and security context of the application. From 62fba8682128dab5a1b11e305f420c48d0472ade Mon Sep 17 00:00:00 2001 From: Lewis Denham-Parry Date: Wed, 24 Nov 2021 10:26:24 +0000 Subject: [PATCH 2/4] docs: add Kubernetes Threat Modeling - add link to paid Kubernetes Threat Modeling workshop --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 4c92c3d..69a480d 100644 --- a/README.md +++ b/README.md @@ -65,6 +65,7 @@ Contributions welcome. Add links through pull requests or create an issue to sta - [Threat Modeling or Whiteboard Hacking training](https://www.toreon.com/threatmodeling/) +- [Kubernetes Threat Modeling](https://learning.oreilly.com/live-events/kubernetes-threat-modeling/0636920055610/0636920059945/) ## Videos From cb4c389001b782d99b6fbb7715926a761662bb34 Mon Sep 17 00:00:00 2001 From: Christoph Niehoff Date: Fri, 25 Mar 2022 14:25:03 +0100 Subject: [PATCH 3/4] Added mention of the online version of eop and cornucopia card games --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 4c92c3d..54aff3f 100644 --- a/README.md +++ b/README.md @@ -201,6 +201,8 @@ Contributions welcome. Add links through pull requests or create an issue to sta - [Threagile](https://github.com/Threagile/threagile) - Threagile is an open-source toolkit for agile threat modeling +- [Threat Modeling Online Game](https://github.com/dehydr8/elevation-of-privilege) - Online version of the Elevation of Privilege and Cornucopia card games. The easy way to get started with threat modeling. + ### Paid tools - [Irius risk](https://iriusrisk.com/threat-modeling-tool/) - Iriusrisk is a threat modeling tool with an adaptive questionnaire driven by an expert system which guides the user through straight forward questions about the technical architecture, the planned features and security context of the application. From 3f7f5b418e2877e4d2b0f6a4fcd5c296e17e7552 Mon Sep 17 00:00:00 2001 From: Priya M Date: Sat, 30 Apr 2022 18:05:10 +1000 Subject: [PATCH 4/4] Fix the link for Kubernetes Threat Model Edited the link for the Kubernetes Thread Model. --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 4c92c3d..d0df98a 100644 --- a/README.md +++ b/README.md @@ -173,7 +173,7 @@ Contributions welcome. Add links through pull requests or create an issue to sta - [OWASP Threat Model Cookbook](https://github.com/OWASP/threat-model-cookbook) -- [Kubernetes Threat Model](https://github.com/kubernetes/community/tree/master/sig-security/security-audit-2019/findings) +- [Kubernetes Threat Model](https://github.com/kubernetes/sig-security/tree/main/sig-security-external-audit/security-audit-2019/findings) - [ISO/SAE 21434 Annex G Example](https://github.com/Yakindu/YSA-examples)