threat-dragon
threat-dragon copied to clipboard
Threat generation for more than one element
Is your feature request related to a problem? Please describe. It's frustrating that you have to choose each element and generate threats for each and everyone of them.
Describe the solution you'd like Ability to choose more than one, possibly all elements and generate threats. That way I could generate the standard threats, which should be put in an editable library btw, and then get the responsible developers to do a review. In that way it's a great tool for awareness and learning as well.
Describe alternatives you've considered At the moment I've made a list of all standard mitigations and "threat descriptions" in the form of CAPEC and/or CWE references in the project. I draw the model, go through all of the elements and generate standard threats, then go through the json file to manually search and replace.
Additional context Nope
Hello @gobrtg , this is a good idea for an enhancement. The changes needed to do this would be in TD core code, so if it is OK I can transfer this issue to the core repo at: https://github.com/OWASP/threat-dragon-core
Ok, I didn't think about that. But yeah, thanks.
Some of this sounds like what I asked for in https://github.com/OWASP/threat-dragon-core/issues/63 and some like https://github.com/OWASP/threat-dragon-core/issues/59. Although I did not think about the group selection piece before adding threats. :)
This probably will not make it to the first version 2.0, so moving it to version 2.x