Return to site

Microsoft Threat Modeling Tool

broken image


Although Microsoft no longer maintains STRIDE, it is implemented as part of the Microsoft Security Development Lifecycle (SDL) with the Threat Modeling Tool, which is still available. Microsoft also developed a similar method called DREAD, which is also a mnemonic (damage potential, reproducibility, exploitability, affected users. Jul 07, 2021 Accelerating the resiliency threat modeling Program has already yielded many benefits for our critical Azure services, so we will be expanding this process to cover every service in Azure. To this end, we are continuously refining our process, documentation, and guidance as well as leveraging past risk discussions to address new risks.

-->

Version 7.3.00729.1 of the Microsoft Threat Modeling Tool (TMT) was released on July 29 2020 and contains the following changes:

  • Bug fixes

Known issues

Microsoft

Errors related to TMT7.application file deserialization

Issue

Some customers have reported receiving the following error message when downloading the Threat Modeling Tool:

This error occurs because some browsers do not natively support ClickOnce installation. In those cases the ClickOnce application file is downloaded to the user's hard drive.

Microsoft Threat Modeling Tool 2016

Workaround

This error will continue to appear if the Threat Modeling Tool is launched by double-clicking on the TMT7.application file. However, after bypassing the error the tool will function normally. Rather than launching the Threat Modeling Tool by double-clicking the TMT7.application file, users should utilize shortcuts created in the Windows Menu during the installation to start the Threat Modeling Tool.

System requirements

  • Supported Operating Systems
    • Microsoft Windows 10 Anniversary Update or later
  • .NET Version Required
    • .NET 4.7.1 or later
  • Additional Requirements
    • An Internet connection is required to receive updates to the tool as well as templates.

Documentation and feedback

Microsoft Threat Modeling Tool 2016

  • Documentation for the Threat Modeling Tool is located on docs.microsoft.com, and includes information about using the tool.

Next steps

Microsoft Threat Modeling Tool Uses __ Threat Classification Scheme

Download the latest version of the Microsoft Threat Modeling Tool.





broken image