116 matches found
threatspec
threatspec - continuous threat modeling, through code Threatspec is an open source project that aims to close the gap between development and security by bringing the threat modelling process further into the development process. This is achieved by having developers and security engineers write...
appsec-agent
AppSec Agent ã³ãŒãã¬ãã¥ãŒãPRã¹ãã£ã³ãè åšã¢ããªã³ã°ãä¿®æ£çæãªã©ã®ããã®AIé§åã®ã»ãã¥ãªãã£ãšãŒãžã§ã³ãã AppSec Agent ã¯ä»¥äžã®3ã€ã®æ¹æ³ã§äœ¿çšã§ããŸãïŒ...
awesome-appsec-interview
Awesome AppSec Interview A curated list of resources, practice questions, and study materials to help you prepare for Application Security Engineer interviews, organized by interview type. Contents Interview Overview Secure Code Review Threat Modeling Coding & Scripting Scenario-Based Interviews...
cumulus
OWASP Cumulus - ã¯ã©ãŠãã®è åšã¢ããªã³ã° Cumulus ã¯ãã¯ã©ãŠãããã³ devOps ããŒã ã«ã»ãã¥ãªãã£ãããããç°¡åãªæ¹æ³ã§ãã Elevation of Privilege ãšããã«ãŒãã²ãŒã ã®äžçš®ãšããŠãã²ãŒããã£ã±ãŒã·ã§ã³ã«ãã£ãŠã·ã¹ãã ã®è åšã¢ããªã³ã°ãè¡ããšããã¢ã€ãã¢ã«åŸã£ãŠããŸãã ãã®è»œéã§åå ¥éå£ã®äœãã¢ãããŒãã¯ãdevOps ãŸãã¯ã¯ã©ãŠããããžã§ã¯ãã®è åšãèŠã€ããã®ã«åœ¹ç«ã¡ãéçºè ã«ã»ãã¥ãªãã£æåã®èãæ¹ãæããŸãã ææ°ã®ãªãªãŒã¹ã¯ãã¡ãã§ãã è åšã¢ããªã³ã° ã·ãªã¢ã¹ã²ãŒã ã«ããè åšã¢ããªã³ã°ã®ã¢ã€ãã¢ã¯ãAdam Shostac...
pytm
pytmïŒäžäžªPythonåŒçåšèå»ºæš¡æ¡æ¶ ç®ä» äŒ ç»çåšè建暡åŸåŸå§å§æ¥è¿ïŒææ¶çè³æ ¹æ¬äžäŒè¿è¡ãæ€å€ïŒæåšåå»ºæ°æ®æµåæ¥åæå ¶èæ¶ãpytm çç®æ æ¯å°åšè建暡å眮ïŒäœ¿å ¶æŽå èªåšå并以åŒå人å䞺äžå¿ã åèœç¹æ§ åºäºæšå¯¹æ¶æè®Ÿè®¡çèŸå ¥åå®ä¹ïŒpytm å¯ä»¥èªåšçæä»¥äžå å®¹ïŒ æ°æ®æµåŸïŒDFDïŒ åºååŸ äžæšçç³»ç»çžå ³çåšè äŸèµèŠæ± Linux/MacOS Python 3.11+ Graphviz 蜯件å JavaïŒOpenJDK 10 æ 11ïŒ plantuml.jar å¿«éåŒå§ tm.py æ¯äžäžªç€ºäŸæš¡åãæšå¯ä»¥è¿è¡å®ä»¥çæå ¶åŒçšçæ¥åååŸè¡šåŸåæä»¶ïŒ mkdir -p tm...
pytm
pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...
threat-modeling-mcp-server
Threat Modeling MCP Server å æ¬çãªè åšã¢ããªã³ã°ãšèªåã³ãŒãæ€èšŒã®ããã®Model Context Protocol MCPãµãŒããŒã ç®æ¬¡ æŠèŠ ã¯ã€ãã¯ã¹ã¿ãŒãããã³ãã äž»ãªæ©èœ åææ¡ä»¶ ã€ã³ã¹ããŒã« Kiro CLIã§ã®å®è¡ åºåãã¡ã€ã«ç®¡ç ã¯ã€ãã¯ãªãã¡ã¬ã³ã¹ ããŒã«æŠèŠ è åšã¢ããªã³ã°ææ³ è åšã¢ããªã³ã°ã«ãããåæ éçº ããŒãããã æŠèŠ ãã®ãµãŒããŒã¯ãããžãã¹ã³ã³ããã¹ãåæãã¢ãŒããã¯ãã£åæãè åšã¢ã¯ã¿ãŒåæãä¿¡é Œå¢çåæãè³ç£ãããŒåæãã³ãŒãã»ãã¥ãªãã£æ€èšŒãå æ¬çãªã¬ããŒãçæãªã©ãè åšã¢ããªã³ã°ã®ããã®ããŒã«ãæäŸããŸãã...
threatcl
threatcl Threat Modeling with HCL What happened to hcltm? hcltm has been renamed to threatcl. Welcome! Overview !TIP Want to read the new documentation? Head over to threatcl.dev There are many different ways in which a threat model can be documented. From a simple text file, to more in-depth wor...
pytm
pytmïŒäžäžªåºäº Python çåšèå»ºæš¡æ¡æ¶ ç®ä» äŒ ç»çåšè建暡åŸåŸåšåŒååææä»å ¥ïŒææ¶çè³æ ¹æ¬äžåãæ€å€ïŒæåšåå»ºæ°æ®æµåæ¥åå¯èœæå ¶èæ¶ãpytm çç®æ æ¯å°åšè建暡巊移ïŒäœ¿å ¶æŽå èªåšå并以åŒåè 䞺äžå¿ã åèœ æ ¹æ®æšå¯¹æ¶æè®Ÿè®¡çèŸå ¥åå®ä¹ïŒpytm å¯ä»¥èªåšçæä»¥äžå å®¹ïŒ æ°æ®æµåŸ DFD åºååŸ äžæšçç³»ç»çžå ³çåšè èŠæ± Linux/MacOS Python 3.11+ Graphviz å Java OpenJDK 10 æ 11 plantuml.jar å¿«éåŒå§ tm.py æ¯äžäžªç€ºäŸæš¡åãæšå¯ä»¥éè¿è¿è¡å®æ¥çæå®åŒçšçæ¥åååŸè¡šåŸåæä»¶ïŒ mkdir -p tm...
threagile
Threagile Agile Threat Modeling Toolkit Threagile see threagile.io for more details is an open-source toolkit for agile threat modeling: It allows to model an architecture with its assets in an agile fashion as a YAML file directly inside the IDE. Upon execution of the Threagile toolkit all...
ws4-secure-design-agentic-systems
CoSAI Workstream 4: Secure Design Patterns for Agentic Systems This repository is for the work of the CoSAI Workstream 4, Secure Design Patterns for Agentic Systems. CoSAI is an OASIS Open Project and an open ecosystem of AI and security experts from industry leading organizations dedicated to...
OWASP-MCP-Threat-Modeling
ãã®ãªããžããªã«ã¯ README ããããŸããã...
threat-dragon
OWASP Threat Dragon OWASP Threat Dragon ã¯ãç¡æã§ãªãŒãã³ãœãŒã¹ã®ã¯ãã¹ãã©ãããã©ãŒã ãªè åšã¢ããªã³ã°ã¢ããªã±ãŒã·ã§ã³ã§ãã è åšã¢ããªã³ã°ã®å³ãäœæããå³ã®èŠçŽ ã«å¯Ÿããè åšãåæããããã«äœ¿çšãããŸãã Mike Goodwin ã¯ãè åšãã¢ããªã³ã°ããããã®çŽæçã§ã¢ã¯ã»ã¹ããããæ¹æ³ãæäŸãããªãŒãã³ãœãŒã¹ã³ãã¥ããã£ãããžã§ã¯ããšã㊠Threat Dragon ãåµèšããŸããã Threat Dragon ã¯ãæè»æ§ãšã·ã³ãã«ããéèŠããããŸããŸãªã¿ã€ãã®ããŒã ãå©çšããããããã«èšèšãããŠããŸãã ãã®ãããžã§ã¯ã㯠OWASP...
threat-modeling-playbook
ã¯ããã« ç§ãã¡ã¯ãæ°ããè åšã¢ããªã³ã°ãã¬ã€ããã¯ãéããŠã補åãšãœãããŠã§ã¢ã®ã»ãã¥ãªãã£ãåäžãããããšãç®æããŠããŸããç§ãã¡ã¯ãè åšã¢ããªã³ã°ããœãããŠã§ã¢ä¿èšŒãåäžãããããã®åºç€ãšãªã掻åãšèããŠããŸããåªããè åšã¢ããªã³ã°ã®å®è·µããçŽåããã補åã®ã»ãã¥ãªãã£åé¡ã枬å®å¯èœãªåœ¢ã§æžå°ããããšç¢ºä¿¡ããŠããŸãã ãªãŒãã³ãœãŒã¹ã®åŒ·ãä¿¡å¥è ã§ãããOWASPã®ç©æ¥µçãªã³ã©ãã¬ãŒã¿ãŒãšããŠããŸãToreonã®é¡§å®¢ãè¶ ããŠåœ±é¿ãåºããããã«ããã®è åšã¢ããªã³ã°ãã¬ã€ããã¯ãã³ãã¥ããã£ã«å¯èŽããŸãã...
threatspec
threatspec - ç¶ç¶çãªè åšã¢ããªã³ã°ãã³ãŒããéããŠ...
owasp-threat-dragon-desktop
OWASP Threat Dragon Threat Dragon ã¯ãããªãŒã§ãªãŒãã³ãœãŒã¹ãã¯ãã¹ãã©ãããã©ãŒã ã® è åšã¢ããªã³ã° ã¢ããªã±ãŒã·ã§ã³ã§ããã·ã¹ãã ã®å³åŒåãšãè åš/察çãèªåçæããã«ãŒã«ãšã³ãžã³ãåããŠããŸãããã㯠OWASP Incubator Project ã§ãããããžã§ã¯ãã®çŠç¹ã¯ãåªãã UXã匷åãªã«ãŒã«ãšã³ãžã³ããããŠä»ã®éçºã©ã€ããµã€ã¯ã«ããŒã«ãšã®çµ±åã«ãããŸãã OWASP ã«ãã è åšã¢ããªã³ã°ãšãªã¹ã¯è©äŸ¡ ã®è¯ãæŠèŠããããThreat Dragon ãå®çŸããå 容ãããã«è©³ãã説æããŠããŸãïŒ ããŒã¿ãããŒå³ã®èšèš è åšã®èªåå€å®ãšé äœä»...
owasp-threat-dragon-desktop
OWASP Threat Dragon Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. The focus of the project is on great UX, a powerful rule engine and integrati...
threat-model-cookbook
OWASP Threat Model Cookbook ãããžã§ã¯ã ãã®ãããžã§ã¯ãã¯ãè åšã¢ãã«ã®äŸãäœæãå ¬éããããšãç®çãšããŠããŸãããããã¯ãã³ãŒããã°ã©ãã£ã«ã«ãªè¡šçŸãããã¹ãã«ãã衚çŸã®åœ¢ããšãããšãã§ããŸããã¢ãã«ã¯å€æ§ãªãã¯ãããžãŒãæ¹æ³è«ããã¯ããã¯ã䜿çšããŸãã ãããã®ã¢ãã«ããåŠãã ããèªåèªèº«ã®ã¢ãã«ãå§ããããã®ããŒã¹ãšããŠäœ¿çšãããããããã¯ã¢ãã«ã®äžéšã«è²¢ç®ããŠæ¡åŒµãããããããšãã§ããŸããããã«ãããè åšã¢ãã«ã®å ±åã¯ãã¯ããã¯ãšãªããŸãã https://owasp.org/www-project-threat-model-cookbook/...
drawio-threatmodeling
è åšã¢ããªã³ã°ã®ããã®Draw.ioã©ã€ãã©ãª ããã¯ãç¡æãã€ã¯ãã¹ãã©ãããã©ãŒã ã®Draw.ioãã€ã¢ã°ã©ã äœæã¢ããªã±ãŒã·ã§ã³ããè åšã¢ããªã³ã°ã«æé©ãªããŒã«ãžãšå€ããã«ã¹ã¿ã ã©ã€ãã©ãªéã§ãã ããŒã¿ãããŒå³ ããŒã¿ãããŒå³ã¯ãã¢ããªã±ãŒã·ã§ã³ãã·ã¹ãã å ã§ããŒã¿ãã©ã®ããã«æµããã®ããçè§£ããããã«çšãããããã·ã³ãã«ãªãã€ã¢ã°ã©ãã³ã°ææ³ã§ããDFDã¯ãè åšã¢ããªã³ã°ã容æã«ããããã«ã·ã¹ãã ã俯ç°ããã®ã«æé©ã§ãã æ»æããªãŒ...
Threat_Model_Examples
Esempi di Modelli di Minaccia Questo repository contiene vari esempi di modelli di minaccia per diverse tecnologie e sistemi. Queste risorse forniscono esempi illustrativi di modelli di minaccia in diversi ambiti, aiutando i professionisti della sicurezza, gli sviluppatori e i ricercatori a...