threat-dragon icon indicating copy to clipboard operation
threat-dragon copied to clipboard

Threat generation for more than one element

Open gobrtg opened this issue 4 years ago • 6 comments

Is your feature request related to a problem? Please describe. It's frustrating that you have to choose each element and generate threats for each and everyone of them.

Describe the solution you'd like Ability to choose more than one, possibly all elements and generate threats. That way I could generate the standard threats, which should be put in an editable library btw, and then get the responsible developers to do a review. In that way it's a great tool for awareness and learning as well.

Describe alternatives you've considered At the moment I've made a list of all standard mitigations and "threat descriptions" in the form of CAPEC and/or CWE references in the project. I draw the model, go through all of the elements and generate standard threats, then go through the json file to manually search and replace.

Additional context Nope

gobrtg avatar Nov 17 '20 09:11 gobrtg

Hello @gobrtg , this is a good idea for an enhancement. The changes needed to do this would be in TD core code, so if it is OK I can transfer this issue to the core repo at: https://github.com/OWASP/threat-dragon-core

jgadsden avatar Nov 17 '20 11:11 jgadsden

Ok, I didn't think about that. But yeah, thanks.

gobrtg avatar Nov 17 '20 11:11 gobrtg

Some of this sounds like what I asked for in https://github.com/OWASP/threat-dragon-core/issues/63 and some like https://github.com/OWASP/threat-dragon-core/issues/59. Although I did not think about the group selection piece before adding threats. :)

adampurkiss avatar Nov 17 '20 14:11 adampurkiss

This probably will not make it to the first version 2.0, so moving it to version 2.x

jgadsden avatar Aug 31 '22 10:08 jgadsden