Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

TRIKE is an open source threat modeling methodology and tool, as presented by the authors. After i tried several threat modeling tools and methodologies, I have the feeling that it is the only real "DATA FLOW" threat modeling as the Microsoft STRIDE is not considering the behavior data flow. Now my problem is i found no documentation on how to use trike! does anyone try it before and have some docs? or at least can give some hints on how to fill in the tool?

share|improve this question
    
i found this pdf maybe help you homepages.feis.herts.ac.uk/~comqjs1/SSPTM2.pdf –  BlueBerry - vignesh4303 Sep 28 '12 at 5:26
add comment

1 Answer 1

The most current documentation already posted (by the Trike team, anyway) is in the Help spreadsheet, which you can find here:

http://sourceforge.net/apps/trac/trike/browser/spreadsheet/trunk/docs/help/TrikeHelp.xlsx

I also have a very rough draft of the documentation for how to actually do the first half of the methodology using the spreadsheet. I am running it by some of the people who use the tools already & expect to post it somewhere on http://www.octotrike.org/ sometime next week. I will post/update here when I post there.

If you are in the San Francisco or Seattle area and are willing to take notes for more documentation, I am willing to show you how to do it.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.