Threat modeling
Threat modeling frameworks, tools, and methodologies
Frameworks 13
- CSA MAESTRO Frameworkcloudsecurityalliance.org
- Threat Modeling OpenAI Responses API with MAESTROcloudsecurityalliance.org
- AI Defense Frameworkedward-playground.github.io
- CMS Threat Modeling Handbooksecurity.cms.gov
- Continuous TRAIL - maintaining threat models across the SDLCblog.trailofbits.com
- Future-Back Threat Modeling: A Foresight-Driven Security Frameworkarxiv.org
- Soatok's Informal Guide to Threat Modelssoatok.blog
- SQOUT: A Risk-Based Threat Analysis Framework for Quantum Communication Systemsarxiv.org
- Standardized Threat Taxonomy for AI Security, Governance, and Regulatory Compliancearxiv.org
- Threat modeling the TRAIL of Bits wayblog.trailofbits.com
- Threat Modeling with ATT&CKcenter-for-threat-informed-defense.github.io
- Threat Modeling: Designing for Security in an AI World - second edition announcementshostack.org
- threats - an extensive list of threat modelling resourcesgithub.com
Threat models 11
- NCC Group - Analyzing AI Application Threat Modelsnccgroup.com
- Analyzing AI Application Threat Modelsresearch.nccgroup.com
- OpenClaw Threat Modeltrust.openclaw.ai
- NCC Group - Role-Specific Impact of Prompt Injectionnccgroup.com
- Attack modeling a forgotten password system - an actionable evolution of threat modelingwahrli.ch
- DevOps threat matrix - Microsoft Security Blogmicrosoft.com
- How Threat Modeling Could Have Prevented the $1.5B Bybit Hackblog.trailofbits.com
- RAG Security and Privacy: Formalizing the Threat Model and Attack Surfacearxiv.org
- Security Threats Against Space Missions - CCSDS Informational Reportpublic.ccsds.org
- The Universal Cloud Threat Modelsecurosis.com
- Threat Modeling of Threat Modelingthreat-modeling.net
Tools 16
- CLI tool for Continuous Threat Modelinggithub.com
- A CLI tool for threat modeling and vgithub.com
- mcp-scan toxic flow analysis / lethal-trifecta threat modelingx.com
- AI featured threat modeligithub.com
- ai-security-analyzer - AI-generated security docs and threat modelsgithub.com
- Bex AI Demo: A Secure by Design Tool - IriusRiskyoutube.com
- Deep Analysis Mode in AI Security Analyzerxvnpw.github.io
- Devici - Continuous Threat Modelingdevici.com
- Gram - Klarna's threat model diagramming toolgithub.com
- nexTM - threat modeling tool for agile software developmentgithub.com
- Security Compass and AI - SD Elements parsing free-text requirements docssecuritycompass.com
- Seezo - Automated Security Design Reviews at Scaleseezo.io
- Threat Modeling STRIDE Template for Miromiro.com
- threat-composer - AWS threat modeling tool with AI-assisted CLI and MCP servergithub.com
- threatcl - formerly hcltm - Documenting your Threat Models with HCLgithub.com
- What's New in SD Elements 2024.4securitycompass.com
Benchmarks and research 8
- TM-Bench: Threat Modeling Benchmarktmbench.com
- Leveraging LLMs for Threat Modeling - Claude 3 Opus vs GPT-4xvnpw.github.io
- ASTRIDE: A Security Threat Modeling Platform for Agentic-AI Applicationsarxiv.org
- Empirical assessment of the perception of graphical threat model acceptabilityarxiv.org
- Human-Centered Threat Modeling in Practice: Lessons, Challenges, and Paths Forwardarxiv.org
- Scaling Threat Modeling with AI: Generating 1000 Threat Models Using Gemini 2.0 and AI Security Analyzerxvnpw.github.io
- State of Threat Modeling Report 2024-25 - Threat Modeling Connectthreatmodelingconnect.com
- TM-Bench - LLM threat modeling benchmarktmbench.com