OWASP
Add a feature in Threat dragon for selecting cards
We have started to create apis that contain OpenCRE codes that we will import to OpenCRE. The same api could be used to help Threat Dragon create a feature for selecting the cards and even import related ASVS and NIST resources into the theat modeling process.
Wouldn’t it be great if the dev teams could finish defining their security requirements while doing threat modeling?
It could change how teams tackle threat modeling and security requirements while automatically defining their requirement list.
We should ensure we help them out with this. We also need to help out OpenCRE and the MAS project to ensure they are connected (e.g: importing MASV into OpenCRE) and while we are doing that lets do ourself a favor and add EoP as an option too.