Home

Welcome to the threat-modelling-resources wiki!

Threat models for technology stacks/components

• Kubernetes
• Docker
• Helm
• OAuth 2.0
• OAuth TM updated
• AI system
• Differential privacy
• SecureDrop
• ArgoCD
• Kamus
• AWS Lambda
• AWS Fargate
• GitHub Enterprise
• Azure Storage

Elevation of Privilege Card Game

• Original EoP Game
• Online game - closest to original
• Online game - Heroku - quick & simple version
• Online game - Croupier - distributes card numbers to players; needs

Other useful references

• Comprehensive overview of different approaches
• Maturity model and open source training
• https://martinfowler.com/articles/agile-threat-modelling.html
• https://medium.com/sagefuturemakers/real-world-threat-modelling-fb14ef767c49
• How GitHub does threat modeling
• In depth model
• https://github.com/Toreon/threat-model-playbook
• Attack trees with Graphviz
• https://developer.ibm.com/components/redhat-openshift-ibm-cloud/articles/threat-modeling-microservices-openshift-4/
• https://www.ibm.com/garage/method/practices/code/threat-modeling
• Curated list of resources