Microsoft Threat Analysis and Modeling is a tool (binaries and code) used to create secure applications by understanding the threats against them. Previously used by Microsoft Application Consulting, it is now offered to those with older projects and teams that have started their threat model with this tool.
This Microsoft Threat Analysis Modeling Tool will no longer be our primary tool. We are providing this tool (binaries and code) for people who have older projects where they previously used this tool and for in flight teams that started their threat model with this tool. Threat modeling is based on a simple principle: Building a secure application requires an understanding of the threats against that application. The challenge has been the difficulty in adopting threat modeling practice for software application development. Over the past two years, the Microsoft Application Consulting; Engineering (ACE) team developed a process that allows non-security subject matter experts to produce feature-rich threat models.
Comments