OWASP Threat Modeling Playbook (OTMP)

OWASP Threat Modeling Playbook (OTMP) - An OWASP incubator project

About OWASP Threat Modeling Playbook (OTMP)

Current location

We donated our Threat Modeling Playbook in markdown in an OWASP GitHub repository.

Intro

We aim to improve product and software security with our new OWASP threat modeling playbook. We consider threat modeling as a foundational activity to improve your software assurance. We are convinced that a good threat modeling practice will measurably decrease security issues of delivered products. We hope you will use this playbook to improve your threat modeling practice. We also encourage you to provide feedback to our OWASP threat modeling community in order to make this playbook even better in our next release. I thank our collaborators (in alphabetic order): Jonas Muylaert, Joris Van den Broeck, Sebastien Deleersnyder, Steven Wierckx and Thomas Heyman to help us create this first release. I also thank Toreon for its decision to donate this work to the threat modeling community. Sebastien Deleersnyder OWASP volunteer 10 September 2020

• OWASP threat modeling

Threat modeling community

We can be found on the following OWASP Threat Modeling Slack channel. If you want to join our Slack channel but the direct link doesn’t work, you need an invitation. Get it here.

• Threat Modeling Slack channel

• here

Input and project roadmap

We are currently gathering feedback and input from the community for our next 1.1 release. Feel free to suggest fixes, feedback or input through our GitHub issues tracker.

• issues tracker

Project roadmap

We plan the following updates to our playbook (version 1.1) by end of 2023:

Project Resources

Project Leaders

Sebastien Deleersnyder

Project Leader

Project Information

Incubator Project

Classification

Other

License

Creative Commons Attribution Share Alike 4.0 International

Contributors

GitHub Stars

Downloads

Corporate Supporters

Become a Corporate Supporter Meet our Corporate Supporters Supporter Job Postings

OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.

OWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.

OWASP Threat Modeling Playbook (OTMP) | OWASP Foundation