https://github.com/michenriksen/drawio-threatmodeling

Draw.io libraries for threat modeling diagrams
https://github.com/michenriksen/drawio-threatmodeling

attack-trees data-flow-diagram dfd diagramming drawio sdl threat-modeling

Last synced: 28 days ago
JSON representation

Draw.io libraries for threat modeling diagrams

• Host: GitHub
• URL: https://github.com/michenriksen/drawio-threatmodeling
• Owner: michenriksen
• License: mit
• Created: 2018-10-01T05:42:00.000Z (over 6 years ago)
• Default Branch: master
• Last Pushed: 2020-11-12T01:52:27.000Z (about 4 years ago)
• Last Synced: 2025-01-12T13:23:12.373Z (30 days ago)
• Topics: attack-trees, data-flow-diagram, dfd, diagramming, drawio, sdl, threat-modeling
• Homepage: https://michenriksen.com/blog/drawio-for-threat-modeling/
• Size: 157 KB
• Stars: 713
• Watchers: 37
• Forks: 185
• Open Issues: 4
• Metadata Files:
  • Readme: README.md
  • License: LICENSE.txt

Awesome Lists containing this project

• awesome-ccamel - michenriksen/drawio-threatmodeling - Draw.io libraries for threat modeling diagrams (Misc)
• awesome-privacy-engineering - Draw.io Libraries for Threat Modeling - Collection of custom libraries for using the Draw.io diagramming application for threat modeling. (Awesome Privacy Engineering [](https://awesome.re) / Privacy Threat Modeling)
• awesome-threat-modelling - drawio-threatmodeling - A collection of custom libraries to turn the free and cross-platform Draw.io diagramming application into the perfect tool for threat modeling. (Tools / Free tools)

README

        
# Draw.io libraries for threat modeling

This is a collection of custom libraries to turn the free and cross-platform [Draw.io] diagramming application into the perfect tool for threat modeling.

## Data Flow Diagrams

[Data Flow Diagramming] is a simple diagramming technique used to gain an understanding of how data flows in an application or system. DFDs are excellent for getting a bird's-eye view of a system to facilitate threat modeling.

![Example Data Flow Diagram](examples/dfd.png)

## Attack Trees

[Attack Trees] are another kind of diagramming method that is great for exploring how a threat actor might attain a specific goal, or how an asset might be attacked.

![Example Attack Tree diagram](examples/attacktree.png)

## Installation

1. [Download] and install draw.io for your operating system

2. Clone or download this repository

3. Open draw.io application and create a new blank diagram

4. Click the *File* menu and then click *Open Library...*

5. Navigate to where you put this project and open one of the xml files

6. Start diagramming!

[Draw.io]: https://www.draw.io/

[Data Flow Diagramming]: https://en.wikipedia.org/wiki/Data_flow_diagram

[Attack Trees]: https://en.wikipedia.org/wiki/Attack_tree

[Download]: https://about.draw.io/integrations/#integrations_offline