OWASP pytm

pytm is a Pythonic framework for threat modeling.

Define your system in Python using the elements and properties described in the pytm framework. Based on your definition, pytm can generate, a Data Flow Diagram (DFD), a Sequence Diagram and most important of all, threats to your system.

About OWASP pytm

Diagrams are output as Dot and PlantUML.

When --dfd argument is passed to the above tm.py file it generates output to stdout, which is fed to Graphviz’s dot to generate the Data Flow Diagram:


tm.py --dfd | dot -Tpng -o sample.png

Generates this diagram:

The following command generates a Sequence diagram.


tm.py --seq | java -Djava.awt.headless=true -jar plantuml.jar -tpng -pipe > seq.png

Generates this diagram:

Project Resources

Project Leaders

Izar Tarandach

Matthew Coles

Project Information

Production Project

Classification

Code

Language

Python

Latest Version

1.4.0

Contributors

GitHub Stars

1170

Downloads

Corporate Supporters

OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.

OWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.