To offer more flexibility, Microsoft Threat Modeling Tool 2016 gives users the option to add their own threats related to their specific domain. This set includes only suggested threat definitions and mitigations which are automatically generated to show potential security vulnerabilities for your data flow diagram. Microsoft Threat Modeling Tool 2016 comes with a base set of threat definitions using STRIDE categories. You can sort on the changed by column if you want to find that threat you just edited. You can sort on the interaction column if you want to group all the threats for each flow.

You can easily filter the grid to show threats for any flow. Now you can sort and filter on any column. Microsoft Threat Modeling Tool 2016 has several improvements. This latest release simplifies working with threats and provides a new editor for defining your own threats. It’s available as a free download from the Microsoft Download Center. The Microsoft Threat Modeling Tool 2016 is a free tool to help you find threats in the design phase of software projects.

We have discussed in the past how applying a structured approach to threat scenarios during the design phase of development helps teams more effectively and less expensively identify security vulnerabilities, determine risks from those threats, and establish appropriate mitigations. Threat modeling is an invaluable part of the Security Development Lifecycle (SDL) process.

SSO solution: Secure app access with single sign-on.

Identity & access management Identity & access management.

App & email security App & email security.

Sdl threat modeling tool tutorial