Microsoft Technology Licensing, LLC

Talhah Munawar Mir

Deepak Jagannathan Manohar

Vineet Batta

Anil Kumar Revuru

Shawn G Veney

Anil Kumar Venkata Revuru

Systems and methods relating to a method for generating a threat analysis and modeling tool are described. In an implementation, aggregate analysis is performed upon applications of an enterprise for complete risk management of the enterprise. The threat analysis model is generated by defining the application, its attributes and the rules related to the application. An application task list is generated from a common task list for the application. Countermeasures for known attacks pertaining to the application are described in the application task list, which allows the developer to reduce the risk of attacks.

Threat analysis and modeling during a software development lifecycle of a software application

A threat modeling application generates threats to a business application. The threat modeling application receives user input associated with business application data. The input may be received through an interface provided by the threat modeling application. Threats are automatically generated from the received data and an attack library. The attack library includes information regarding attacks and related countermeasures. By automatically generating threats based on business application information, the threat modeling application can generate security threats consistently and objectively.

Growing community of inventors

Redmond, WA, United States of America

Talhah Munawar Mir