threat-modeling-mcp-server

Servidor MCP de Modelado de Amenazas Un servidor de Protocolo de Contexto de Modelo MCP para el modelado de amenazas integral con validación de código guiada. Tabla de Contenidos Descripción General Prompts de Inicio Rápido Características Principales Requisitos Previos Instalación Ejecución con...

iotmap

IoTMap IoTMap es una herramienta que modela redes IoT utilizando uno o múltiples protocolos simultáneamente. Este es un trabajo en progreso, como parte de una tesis doctoral sobre seguridad de Internet de las Cosas. Este repositorio se actualiza regularmente a medida que se obtienen nuevos...

Occ

Prohibited Items Segmentation via Occlusion-aware Bilayer Modeling ICME 2025 Official PyTorch Implementation of Prohibited Items Segmentation via Occlusion-aware Bilayer Modeling. Paper link: IEEE, Arxiv. Get Started Dependencies Code is successfully tested on Linux with Pytorch 2.1.2 and CUDA...

Kaspersky_CVE-2024-3094

Security Review: CVE-2024-3094 XZ Utils Backdoor Author: Sushin Ivan Date: March 2026 1. Project Description This repository contains the results of a full security review of the vulnerability CVE-2024-3094 Supply Chain Attack in the XZ Utils library. Objective: Conduct threat analysis Threat...

threat-model-cookbook

OWASP Threat Model Cookbook Project This project is about creating and publishing threat model examples. They can be in the form of code, graphical or textual representations. The models will use diverse technologies, methodologies and techniques. You can learn from those models, use them a base ...

drawio-threatmodeling

Draw.io libraries for threat modeling This is a collection of custom libraries to turn the free and cross-platform Draw.io diagramming application into the perfect tool for threat modeling. Data Flow Diagrams Data Flow Diagramming is a simple diagramming technique used to gain an understanding of...

Threat_Model_Examples

Threat Model Examples This repository contains various threat model examples for different technologies and systems. These resources provide illustrative examples of threat models across different domains, helping security professionals, developers, and researchers better understand how threat...

gha-lab-ca4fa82ac5

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of mesa/mesa at commit...

apparatus

ASTo - Herramienta de Software para Aparatos Aviso de archivo - Tras la finalización de mi grado de investigación, el repositorio ha sido archivado. ASTo ha tenido un impacto significativo en mi investigación. Quiero expresar mi gratitud a todos los que ayudaron a mejorarlo. Sin embargo, esto no...

The_Automotive_Threat_Modeling_Template

Background A threat modeling workshop for automotive-related technologies requires DFDs with custom elements, tailored threats and specific recommendations. The lack of a specific template for automotive threat modeling brought about the development of the Automotive Threat Modeling Template, whi...

AISA-Scanner

AISA-Scanner — Autonomous AI Security Agent AISA-Scanner is a self-evolving, AI/ML-driven cybersecurity analysis toolkit that blends NLP, CVE enrichment, autonomous scanning, risk modeling, and enterprise-grade reporting into a single framework. It’s designed for modern security researchers,...

OWASP-MCP-Threat-Modeling

This repository does not have a README...

TamarinAgent

Confidence-Guided Protocol IR Review UI This repository contains a local human-in-the-loop UI for LLM-aided security protocol modeling. It supports the workflow described in our work: Confidence-Guided Protocol IR for LLM-Aided Security Protocol Modeling The system introduces a protocol...

threatcl v0.6.8

threatcl Threat Modeling with HCL What happened to hcltm? hcltm has been renamed to threatcl. Welcome! Overview !TIP Want to read the new documentation? Head over to threatcl.dev There are many different ways in which a threat model can be documented. From a simple text file, to more in-depth wor...

The OWASP Top 10 for LLM Applications 2026: From Model Risks to Agentic Security

...

What 50 open source projects taught us about security in the AI era

AI is changing the pace of open source development and the security challenges that come with it. Maintainers are reviewing unfamiliar contributions, managing new attack surfaces, and responding to vulnerabilities with limited time and resources. Session 4 of the GitHub Secure Open Source Fund...

The Anatomy of a Prompt Injection: A Component Model for Structured Analysis

Four years after prompt injection was first identified in 2022, attacks are still predominantly documented as verbatim strings rather than structured exploits, despite advancing agent capabilities and threat actors embedding injections to subvert AI-assisted security analysis. This paper formaliz...

Important: Red Hat Security Advisory: libyang security update

An update for libyang is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

ThreatForest: Multi-Agent Attack Tree Generation with Pluggable TTP Framework Mapping

Threat modeling is essential for secure software development, yet manual analysis of cloud-native architectures is slow and demands scarce security expertise. We present ThreatForest, a multi-agent system that generates structured attack trees from source code repositories, maps attack steps to...

The vulnerability of software for modeling and simulating the operation of Siemens S7 controllers lies in the unlimited distribution of resources, which allows a hacker to trigger a service failure.

The vulnerability of software for modeling and simulating the operation of Siemens S7 controllers is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause malfunctions in service operations...