Use RAAML for threat models

[kuwv]

Model Based Systems Engineering (MBSE) typically uses SysML to interconnect models. The Risk Analysis and Assessment Modeling Language (RAAML) specification is a SysML compliant format that would allow integration with other modeling capabilities such as simulation.

Ideally, one would be able to switch between using PlantUML or SysML but the latter does more than visualization.

References: https://www.omg.org/spec/RAAML/1.0/Beta2/About-RAAML https://github.com/gaphor/gaphor https://github.com/OWASP/threat-dragon/issues/639 https://www.oreilly.com/library/view/threat-modeling/9781492056546/ch04.html

[izar]

so if I understand you correctly you are proposing RAAML as an additional output option for pytm?

[kuwv]

@izar yes as an alternative output format

[izar]

sounds great! I don't think any of the current collaborators is fluent in RAAML, is that something you could send a PR for?