Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there any good open source software for Security Risk Analysis?

for example something like one explained on :

share|improve this question
I'm sorry, it is not clear what you are asking. I think it has lost something in translation. You might try editing the question. – Graham Hill Jun 14 '12 at 8:57
If you are worried about using a weak password the solution is really simple. Don't use weak passwords – Ramhound Jun 14 '12 at 11:33
That's much clearer, thanks. Next question: what sort of risk analysis methodology do you use? There are many different approaches, and each one has different requirements. – Graham Hill Jun 14 '12 at 14:10
up vote 3 down vote accepted

No. Security risk analysis requires intelligence, understanding of security concepts, knowledge of the application domain, and experience with security. It's not something you can automate with a tool. There is no substitute for having an experienced security expert understand your application domain and perform a security risk analysis.

(Of course, there may be opportunities for a security expert to use tools to help him/her with the analysis. But the tool is not a replacement for a human expert. A tool cannot perform a security risk analysis on its own.)

share|improve this answer

As risk analysis and threat modeling are closely related IMO, I think you should give Threat Modeler a try. Free and works great for me :)

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.