Threat Model-as-Code
summary
Claims an open-source tool called Automaton — Threat Modeling as Code that keeps threat models as YAML, links YAML user/abuser stories to concrete threat scenarios, test cases and mitigations, and runs them in CI. Integrations include Robot Framework + ZAP/Burp/WFuzz/Sublist3r/Nmap to trigger scans, generate diagrams, and correlate findings back to the model. Demo shows the pipeline executing and producing linked reports; the project reports a three-fold benefit and a working CLI-oriented prototype ready for contribution.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 2:58Current threat modeling issues
- 8:03Integrating security and DevOps
- 12:05Introducing Thread Playbook
- 17:12Framework demo
- 25:39Reporting and outputs
- 28:59Use cases and automation
- 32:28Future and conclusion
related talks
30mAgile Threat Modeling with Open-Source Tools
58mThreat Modeling In And For Your Organization
47mAutomating Architectural Risk Analysis with the Open Threat Model format
21mA tool to help improve your threat modeling
46mThreat modeling is on the rise
26mYou Too Can Do Threat Modeling
49mThreat Modeling Toolkit
01h 00mThreat Modeling for Secure Software Design