threat-dragon
threat-dragon copied to clipboard
Support for logical grouping of processes and data stores
Describe what problem your feature request solves Various processes and data stores can be grouped with a drawing object in order to show their logical association. For example, imagine a web server and database - should be represented as a process and a data store, but together are logically the server-side systems or the "application".
Describe the solution you'd like I'm thinking of some sort of a dotted line faded box that can wrap around current drawing objects to show their grouping.
Additional context None.
Hi @kohlerbn, thanks for opening the issue!
In version 2 (to be released some point next year), we've added a "box-style" trust boundary. The text that says "trust boundary" can be edited to say whatever it needs to (eg "backend").
https://github.com/OWASP/threat-dragon/issues/54#issuecomment-865085014
Do you think that this would satisfy that need for logical grouping of entities?
Hi @lreading - that could work. But, typically trust zones mean something relevant to the threat model whereas what I was thinking of is more just a logical grouping. I am very excited for the trust zone boundaries though!
Thinking about this more, I can definitely see the difference between the logical grouping and trust boundaries. I think this would be a nice feature to add. It probably won't bee with the initial 2.0 release, but something that should be easy enough to add later. :smile: