Systems and methods for assisted model generation
Modeling methods include providing one or more data stores storing model components and in some cases threats, each threat associated with at least one model components. A relational diagram of a system, application or process is displayed on one or more user interfaces. The diagram includes visual representations of the model components and defines a model. In response to adding a model component to the model, a list of one or more model components associated with the added model component is displayed, along with an indication of whether the model components are required to be added to the model. In some implementations a threat report is displayed on a threat report interface and includes each threat that is associated through the data store(s) with one of the model components in the model. Modeling systems and threat modeling systems include systems configured to carry out the modeling and threat modeling methods.
1. A modeling method, comprising:
providing one or more data stores, the one or more data stores comprising:
a plurality of threat model components stored therein; and
a plurality of threats stored therein, wherein each of the threats is associated with at least one of the threat model components through the one or more data stores;
displaying, on one or more user interfaces displayed on one or more computing devices communicatively coupled with the one or more data stores, a relational diagram of one of a system, an application, and a process, using visual representations of the threat model components, the relational diagram defining a threat model;
in response to receiving user input using the one or more user interfaces, adding one of the threat model components to the threat model;
in response to the added threat model component being added to the threat model, displaying on the one or more user interfaces a list of one or more threat model components associated through the one or more data stores with the added threat model component; and
generating, using the one or more computing devices, and displaying, on the one or more user interfaces, a threat report displaying each threat that is associated through the one or more data stores with one of the threat model components included in the threat model.
2. The method of claim 1 , wherein displaying the list comprises displaying an indication of whether each threat model component in the list is required to be added to the threat model.
3. The method of claim 1 , further comprising displaying a relationships interface, on the one or more user interfaces, wherein the relationships interface displays relationship details for all threat model components associated with one another, through the one or more data stores, using one or more defined relationships.
4. The method of claim 3 , further comprising, in response to receiving user input using the relationships interface, defining a relationship between two threat model components, wherein the defined relationship includes an indication of whether one of the two threat model components is required to be added to the threat model if the other of the two threat model components is added to the threat model.
5. The method of claim 3 , wherein the relationship details include an indication of whether one of the threat model components is one of attached to, associated with, contained in, or contains, another threat model component.
6. The method of claim 3 , further comprising, in response to receiving user input using the relationships interface, editing the defined relationship for two threat model components from one of attached to, associated with, contained in, and contains, to another of attached to, associated with, contained in, and contains.
7. The method off claim 3 , wherein the relationships interface includes one or more selectors configured to, in response to receiving user input, delete the defined relationship between two threat model components.
8. The method of claim 3 , wherein the relationships interface includes one or more selectors configured to, in response to receiving user input, toggle whether the defined relationship between two threat model components is required.
9. The method of claim 1 , further comprising displaying a resource interface, on the one or more user interfaces, wherein the resource interface displays, for a plurality of the threat model components, correlated third-party components of a computing network.
10. The method of claim 1 , wherein the user input adding the added threat model component to the relational diagram comprises a drag-and-drop user input.
11. The method of claim 1 , further comprising, in response to receiving user selection of an execute selector, automatically diagramming on the diagram interface one of the threat model components in the list and an illustration representing a defined relationship between the added threat model component and the automatically diagrammed threat model component.
12. A modeling system, comprising:
one or more computing devices communicatively coupled with one or more data stores, the one or more data stores comprising:
a plurality of threat model components stored therein; and
a plurality of threats stored therein, wherein each of the threats is associated with at least one of the threat model components through the one or more data stores;
a diagram interface, displayed on the one or more computing devices, displaying a relational diagram of one of a system, an application, and a process, using visual representations of the threat model components, the relational diagram defining a threat model;
a tasks interface displaying, in response to one of the threat model components being added to the relational diagram, a list of one or more of the threat model components related to the added threat model component through defined relationships in the one or more data stores; and
a threat report interface, displayed on the one or more computing devices, including a threat report displaying each threat that is associated through the one or more data stores with one of the threat model components included in the threat model.
13. The system of claim 12 , wherein the list includes an indication of whether each threat model component in the list is required to be added to the threat model.
14. The system of claim 12 , further comprising a relationships interface, displayed on the one or more computing devices, displaying, for all defined relationships between threat model components, relationship details, the relationship details including an indication of whether one of the threat model components is one of attached to, associated with, contained in, or contains, another threat model component.
15. The system of claim 14 , further comprising an add selector displayed on the relationships interface configured to initiate storing, in the one or more data stores, a new defined relationship between two threat model components.
16. The system of claim 14 , further comprising a delete selector displayed on the relationships interface configured to initiate deleting, from the one or more data stores, the defined relationship between two threat model components.
17. The system of claim 14 , further comprising a required selector, displayed on the relationships interface, configured to toggle the defined relationship between two threat model components between a required state and a not-required state.
18. The system of claim 12 , further comprising an execute selector, displayed on the diagram interface, configured to initiate automatic diagramming on the diagram interface of one of the threat model components in the list and an illustration representing the defined relationship between the added threat model component and the automatically diagrammed threat model component.
19. The system of claim 14 , further comprising an edit selector, displayed on the relationships interface, configured to edit the defined relationship between two threat model components from one of attached to, associated with, contained in, and contains, to another of attached to, associated with, contained in, and contains.
20. A modeling method, comprising:
providing one or more data stores, the one or more data stores comprising:
a plurality of model components stored therein, the plurality of model components including a first model component and a second model component; and
a stored defined relationship indicating that the second model component is required to be added to any model that includes the first model component;
displaying, on a diagram interface displayed on one or more computing devices communicatively coupled with the one or more data stores, a relational diagram of one of a system, an application, and a process, using visual representations of the model components, the relational diagram defining a model;
in response to receiving user input using the diagram interface, adding the first model component to the model; and
in response to the first model component being added to the model, displaying on the diagram interface an indication that the second model component is required to be added to the model.