Threat Modeling Resources

Introduction

Below is a list of URLs and resources to consider for threat modeling. This list is slightly organized. :)

Resources

https://github.com/segmentio/threat-modeling-training

https://martinfowler.com/articles/agile-threat-modelling.html

https://www.notion.so/templates/threat-model

https://medium.com/@mohamed.osama.aboelkheir/list/threat-modeling-handbook-309a70ec273f

Adam Shostack's Threat Modeling: Designing for Security, ie, "The TM Bible"

Tarandach and Coles's Threat Modeling: A Practical Guide for Development Teams, ie, the "Fish Book"

https://github.com/adamshostack/4QuestionFrame

https://www.threatmodelingmanifesto.org/

https://shostack.org/blog/fast-cheap-good/

https://thoughtworksinc.github.io/sensible-security-conversations/

https://cwe.mitre.org/top25/archive/2023/2023_top25_list.html

https://github.com/Autodesk/continuous-threat-modeling

https://threat-modeling.net/threat-modeling-of-threat-modeling/

https://github.com/arnepadmos/threats#examples

https://github.com/hysnsec/awesome-threat-modelling