Threat model chaining and attack simulation systems and related methods
Systems and methods for determining one or more security threats associated with code in a code file are described. The method includes analyzing the code file to identify one or more properties, of a plurality of properties associated with one or more resources included in the code file. For each property of the identified one or more properties, the method further includes identifying a value for the property defined in the code file, and determining whether a security threat is associated with the property based on the identified value for the property and information regarding security threats associated with one or more values of the plurality of properties.
1. A threat model chaining method, comprising:
providing one or more databases, the one or more databases storing:
a plurality of threat model components, each threat model component defining one or more elements of systems, applications, or processes; and
a plurality of threat models, each threat model associated with at least one threat model component of the plurality of threat model components;
providing one or more interfaces, including a diagram interface, configured to be displayed on one or more end user computing devices communicatively coupled with the one or more databases;
configuring the diagram interface to display a relational diagram of one of a system, an application, or a process, using visual representations of at least one first threat model component, the relational diagram defining a first threat model based on the at least one first threat model component; and
configuring the diagram interface to, in response to receiving one or more first user inputs, add at least one second threat model component to the displayed relational diagram and thereby update the first threat model by adding at least one second threat model associated with the at least one second threat model component to the first threat model,
wherein the at least one second threat model component is not a part of the first threat model before being added,
wherein the at least one second threat model component comprises a predefined interrelated group of two or more elements of the system, the application, or the process, and
wherein the at least one second threat model component changes a composition of the system, the application, or the process.
2. The threat model chaining method of claim 1 , further comprising configuring the diagram interface to, in response to receiving a user selection of one threat model component of the at least one first threat model component or the at least one second threat model component, visually display attack paths of all threats associated with the selected threat model component.
3. The threat model chaining method of claim 2 ,
wherein the one or more databases further store a plurality of compensating controls, each compensating control designed to mitigate at least one threat identified in at least one threat model of the plurality of threat models,
the method further comprising configuring the diagram interface to, in response to receiving a user toggle of a first compensating control of the selected threat model component to an on state, toggle all attack paths, of the displayed attack paths, mitigatable by the first compensating control to a mitigated display state.
4. The threat model chaining method of claim 3 , further comprising configuring the diagram interface to, in response to receiving a user toggle of the first compensating control to an off state, toggle all the attack paths mitigatable by the first compensating control to an unmitigated display state.
5. The threat model chaining method of claim 3 , further comprising configuring the diagram interface to, in response to receiving a second user selection to remove the first compensating control from the updated first threat model, toggle all the attack paths mitigatable by the first compensating control to an unmitigated display state.
6. The threat model chaining method of claim 2 ,
wherein the selected threat model component includes a plurality of elements,
the method further comprising configuring the diagram interface to, in response to receiving a second user selection corresponding to one or more elements of the plurality of elements, visually display only attack paths of all threats associated with the selected one or more elements.
7. The threat model chaining method of claim 2 , further comprising configuring the diagram interface to, in response to receiving a second user selection to alter a profile of an attacking component, alter the visually displayed attack paths.
8. The threat model chaining method of claim 1 , further comprising, in response to receiving one or more second user inputs, storing one or more additional threat model components in the one or more databases, and storing one or more additional threat models associated with the one or more additional threat model components in the one or more databases.
9. The threat model chaining method of claim 1 ,
wherein at least one element of the two or more elements of the at least one second threat model component is another threat model component of the plurality of threat model components, and
wherein the at least one second threat model associated with the at least one second threat model component includes another threat model associated with the another threat model component, thereby defining nested threat models.
10. A threat model chaining system, comprising:
one or more memory devices configured to store one or more databases, the one or more databases storing:
a plurality of threat model components, each threat model component defining one or more elements of systems, applications, or processes; and
a plurality of threat models, each threat model associated with at least one threat model component of the plurality of threat model components; and
one or more computing devices communicatively coupled with the one or more memory devices storing the one or more databases, the one or more computing devices configured to:
display, on one or more displays of the one or more computing devices one or more input interfaces including a diagram interface, wherein the diagram interface is configured to display a relational diagram of one of a system, an application, or a process, using visual representations of at least one first threat model component, the relational diagram defining a first threat model based on the at least one first threat model component; and
in response to receiving one or more first user inputs, add at least one second threat model component to the displayed relational diagram and thereby update the first threat model by adding at least one second threat model associated with the at least one second threat model component to the first threat model,
wherein the at least one second threat model component is not a part of the first threat model before being added,
wherein the at least one second threat model component comprises a predefined interrelated group of two or more elements of the system, the application, or the process, and
wherein the at least one second threat model component changes a composition of the system, the application, or the process.
11. The threat model chaining system of claim 10 , wherein the diagram interface is further configured to, in response to receiving a user selection of one threat model component of the at least one first threat model component or the at least one second threat model component, visually display attack paths of all threats associated with the selected threat model component.
12. The threat model chaining system of claim 10 , wherein the one or more computing devices are further configured to, in response to receiving one or more second user inputs, storing one or more additional threat model components in the one or more databases, and storing one or more additional threat models associated with the one or more additional threat model components in the one or more databases.
13. The threat model chaining system of claim 11 ,
wherein the one or more databases further store a plurality of compensating controls, each compensating control designed to mitigate at least one threat identified in at least one threat model of the plurality of threat models, and
wherein the diagram interface is further configured to, in response to receiving a user toggle of a first compensating control of the selected threat model component to an on state, toggle all attack paths, of the displayed attack paths, mitigatable by the first compensating control to a mitigated display state.
14. The threat model chaining system of claim 13 , wherein the diagram interface is further configured to, in response to receiving a user toggle of the first compensating control to an off state, toggle all the attack paths mitigatable by the first compensating control to an unmitigated display state.
15. The threat model chaining system of claim 13 , wherein the diagram interface is further configured to, in response to receiving a second user selection to remove the first compensating control from the updated first threat model, toggle all the attack paths mitigatable by the first compensating control to an unmitigated display state.
16. The threat model chaining system of claim 11 ,
wherein the selected threat model component includes a plurality of elements, and
wherein the diagram interface is further configured to, in response to receiving a second user selection corresponding to one or more elements of the plurality of elements, visually display only attack paths of all threats associated with the selected one or more elements.
17. The threat model chaining system of claim 11 , wherein the diagram interface is further configured to, in response to receiving a second user selection to alter a profile of an attacking component, alter the visually displayed attack paths.
18. The threat model chaining system of claim 10 ,
wherein at least one element of the two or more elements of the at least one second threat model component is another threat model component of the plurality of threat model components, and
wherein the at least one second threat model associated with the at least one second threat model component includes another threat model associated with the another threat model component, thereby defining nested threat models.