Skip to content

Latest commit

 

History

History
19 lines (11 loc) · 1.38 KB

model.md

File metadata and controls

19 lines (11 loc) · 1.38 KB

Model

Threagile model is defined in yaml and comply to schema.

The most important field from where analysis is starting is technical_assets. Another type of assets is data_assets which is modelling which data assets will be stored, processed, sent by technical asset.

Each technical asset has fields to link between each other and with data assets:

  • communication_links - describe how technical assets linked to each other, inside communication links there will be also important fields like data_assets_sent and data_assets_stored.
  • data_assets_processed, data_assets_stored - describe which data assets processed or stored by the technical asset.

Also it is possible to identify in model trust_boundaries and shared_runtime to group technical assets under shared runtime or trust boundaries.

That is the most important fields to build the model. You can find more by reading example

After model is ready next steps would be running the tool in analyze mode to identify risks by risk rules algorithms. This will generate a lot of useful reports which will overview the system in a different formats.

Some of identified risks are real risks, some of it is accepted risk therefore next important field would be risk_tracking where it would be possible to document risk analysis model.