Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

TRIKE is an open source threat modeling methodology and tool, as presented by the authors. After i tried several threat modeling tools and methodologies, I have the feeling that it is the only real "DATA FLOW" threat modeling as the Microsoft STRIDE is not considering the behavior data flow. Now my problem is i found no documentation on how to use trike! does anyone try it before and have some docs? or at least can give some hints on how to fill in the tool?

share|improve this question
i found this pdf maybe help you – BlueBerry - Vignesh4303 Sep 28 '12 at 5:26

The most current documentation already posted (by the Trike team, anyway) is in the Help spreadsheet, which you can find here:

I also have a very rough draft of the documentation for how to actually do the first half of the methodology using the spreadsheet. I am running it by some of the people who use the tools already & expect to post it somewhere on sometime next week. I will post/update here when I post there.

If you are in the San Francisco or Seattle area and are willing to take notes for more documentation, I am willing to show you how to do it.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.