Threat Dragon version 1.6.1

Downloads

OWASP Threat Dragon Downloads

Install

The desktop and web application versions of Threat Dragon can be downloaded from the OWASP GitHub area, with version 1.6.1 being the latest version. See the install instructions for the desktop versions or the web application version.

Supplementary materials

Demonstrations

A good introduction is provided by Mike Goodwin giving a lightning demo during the OWASP Open Security Summit in June 2020.

There is a longer introduction to Threat Dragon provided by the OWASP Spotlight series.

The Threat Modeling Gamification seminar by Vlad Styran shows how using Threat Dragon can make threat modeling fun. Vlad has also provided Threat Modeling with OWASP Threat Dragon in Ukrainian.

OWASP Portland Training Day 2021

The ‘Enter the Dragon’ demonstration model provides a staged example:

  1. first step is the project creation
  2. second step has the diagram filled in
  3. final step includes some threats

There is an accompanying ‘Enter the Dragon’ slide deck in PDF and Libre Office OpenDocument Presentation formats.

OWASP Bristol chapter

Presentation at the Bristol chapter meeting November 2019 in OpenDocument Presentation format

Presentation at the Bristol chapter meeting September 2017, OpenDocument Presentation format abbreviated version and longer version.