threat-dragon icon indicating copy to clipboard operation
threat-dragon copied to clipboard

Support for logical grouping of processes and data stores

Open kohlerbn opened this issue 3 years ago • 4 comments

Describe what problem your feature request solves Various processes and data stores can be grouped with a drawing object in order to show their logical association. For example, imagine a web server and database - should be represented as a process and a data store, but together are logically the server-side systems or the "application".

Describe the solution you'd like I'm thinking of some sort of a dotted line faded box that can wrap around current drawing objects to show their grouping.

Additional context None.

kohlerbn avatar Oct 07 '21 14:10 kohlerbn

Hi @kohlerbn, thanks for opening the issue!

In version 2 (to be released some point next year), we've added a "box-style" trust boundary. The text that says "trust boundary" can be edited to say whatever it needs to (eg "backend").

https://github.com/OWASP/threat-dragon/issues/54#issuecomment-865085014

Do you think that this would satisfy that need for logical grouping of entities?

lreading avatar Oct 23 '21 02:10 lreading

Hi @lreading - that could work. But, typically trust zones mean something relevant to the threat model whereas what I was thinking of is more just a logical grouping. I am very excited for the trust zone boundaries though!

kohlerbn avatar Oct 27 '21 18:10 kohlerbn

Thinking about this more, I can definitely see the difference between the logical grouping and trust boundaries. I think this would be a nice feature to add. It probably won't bee with the initial 2.0 release, but something that should be easy enough to add later. :smile:

lreading avatar Oct 29 '21 02:10 lreading