Skip to content

cds-snc/threat-modeling-tool

Threat Modeling Tool Single Page App (SPA)

Built on top of the Threat Composer Tool by Amazon (https://awslabs.github.io/threat-composer/workspaces/default/dashboard) This version consolidates the 2 original projects (threat-composer & threat-composer-app) into a single project and removes the 3rd project entirely (threat-composer-infra) as we will be using a different deployment topology. It also adds a new dependency @projectstorm/react-diagrams, for further development of a DFD builder.

Features included in this MVP

  • Interactive Dataflow Diagram builder: facilitates STRIDE-per-element threat modeling
  • Questionnaire-based selection of security controls

Watch a Demo of the CDS Threat Modeling Tool on YouTube

Demo of CDS threatmodeling tool

Quickstart using codespaces

  1. Open in GitHub Codespaces
  2. The codespace will install and build the initial app, so all you need to do get it running is run npm start in the terminal.

Quickstart using the devcontainers

  1. Clone the repo git clone https://github.com/cds-snc/threat-modeling-tool.git
  2. Using VS Code and the Dev Containers extension, select Dev Containers: Open Folder in Container... and select the project folder.
  3. The devcontainer will install and build the initial app, so all you need to do get it running is run npm start in the terminal.

Releases

No releases published

Packages

No packages published

Languages