ENG 195 – Implementing the Microsoft SDL Threat Modeling Tool

Course Overview

This course describes the features of the Microsoft SDL Threat Modeling tool, which complements the Microsoft SDL Threat Modeling process. While not required to perform threat modeling, using the tool facilitates the creation of threat models and helps enumerate threats using STRIDE.

Topics include:

• Creating accurate data flow diagrams (DFDs) in your threat model
• Identifying flaws in DFDs and analyzing it for potential threats
• Generating reports to export threats to issue tracking tools