Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. Sugar-Free and Secure: no any external dependencies except for chart plotting are used

OWASP Ontology-driven Threat Modelling framework

A Java library for programmatically calculating OWASP Risk Rating scores

A compiler for the Meta Attack Language

A probabilistic attack simulation language for the (abstract) IT domain

OWASP Ontology-driven Threat Modelling framework (mirror)

Spyderisk web service and web client

A framework designed to abstract away the virtualization details of setting up an automated environment

Blog of iihero (Sean)

A MAL-based Threat Containment Strategy Solver

This repository contains the thesis for the Master in Computer Science. This thesis introduces an event-driven Domain-Specific Language (DSL) called Threat Modeling Language (TML)