Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 1 down vote favorite

Is there any good open source software for Security Risk Analysis?

for example something like one explained on : http://www.security-risk-analysis.com/introduction.htm

share|improve this question
2  
I'm sorry, it is not clear what you are asking. I think it has lost something in translation. You might try editing the question. – Graham Hill Jun 14 '12 at 8:57
If you are worried about using a weak password the solution is really simple. Don't use weak passwords – Ramhound Jun 14 '12 at 11:33
1  
That's much clearer, thanks. Next question: what sort of risk analysis methodology do you use? There are many different approaches, and each one has different requirements. – Graham Hill Jun 14 '12 at 14:10

2 Answers

up vote 1 down vote accepted

No. Security risk analysis requires intelligence, understanding of security concepts, knowledge of the application domain, and experience with security. It's not something you can automate with a tool. There is no substitute for having an experienced security expert understand your application domain and perform a security risk analysis.

(Of course, there may be opportunities for a security expert to use tools to help him/her with the analysis. But the tool is not a replacement for a human expert. A tool cannot perform a security risk analysis on its own.)

share|improve this answer
up vote 1 down vote

As risk analysis and threat modeling are closely related IMO, I think you should give Threat Modeler a try. Free and works great for me :)

http://www.myappsecurity.com/threatmodeler/

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.