Where can I find a collection of Threat Models?

Question

I found a very nice SSL Threat model on this web page and would like to find more on different topics.

How would I go about locating more images like these? Is there an organisation or website I could go to?

@BernieWhite - Yes this is great! I hope people continue to add threat models to this list — makerofthings7, Nov 28 '11 at 23:04

score 6 · Accepted Answer · answered Sep 23 '11 at 12:28

SANS.org have a few really good resources. Including:

Also for web application try https://www.owasp.org/index.php/Threat_Risk_Modeling.

score 3 · Answer 2 · edited Nov 13 '11 at 15:00

3

If you like to get into the basics of Threat Models, then Threat Modelling from Microsoft Press is a nice book. Don't be put off by the introduction-page, it is an overall fine beginner read.

edited Nov 13 '11 at 15:00

Scott Pack

15,167
5
61
91

answered Sep 23 '11 at 13:35

AbhishekKr

563
3
4

score 2 · Answer 3 · answered Nov 11 '11 at 23:38

2

MyAppSecurity's ThreatModeler uses a software centric approach to Threat Modeling. It includes a feature to view an Attack Graph / Threat Pattern for individual software components.

ThreatModeler Page

answered Nov 11 '11 at 23:38

Epoch Win

922
2
7
14

Where can I find a collection of Threat Models?

3 Answers3