3 ms·
Systems Modeling to Refine Strategy
- westurner 2y agoFrom "Architectural Retrospectives: The Key to Getting Better at Architecting" https://news.ycombinator.com/item?id=41234471 https://news.ycombinator.com/item?id=41234471 : > Is there already a good way to link an ADR Architectural Decision Record with Threat Modeling primitives and considerations? Awesome-threat-modeling > Tools: https://github.com/hysnsec/awesome-threat-modelling#free-tools https://github.com/hysnsec/awesome-threat-modelling#free-too... - pytm: https://github.com/izar/pytm https://github.com/izar/pytm - threatspec has a docstring spec for adding threat modeling annotations to source code: https://threatspec.org/ https://threatspec.org/ - OWASP Threat Dragon : https://owasp.org/www-project-threat-dragon/ https://owasp.org/www-project-threat-dragon/ : > Threat Dragon supports STRIDE / LINDDUN / CIA / DIE / PLOT4ai, provides modeling diagrams and implements a rule engine to auto-generate threats and their mitigations. - OWASP Threat Modeling Cheat Sheet > Systems Modeling: https://cheatsheetseries.owasp.org/cheatsheets/Threat_Modeling_Cheat_Sheet.html#system-modeling https://cheatsheetseries.owasp.org/cheatsheets/Threat_Modeli... - https://github.com/dehydr8/elevation-of-privilege https://github.com/dehydr8/elevation-of-privilege: > An online multiplayer version of the Elevation of Privilege (EoP) threat modeling card game
- westurner 2y agoRe: "Thinking in Systems" by Donella Meadows: - "Limits to Growth: The 30-Year Update" (2012) by Donella H. Meadows. https://a.co/7MgO0bv https://a.co/7MgO0bv - "Leverage Points: Places to Intervene in a System" (2018) https://news.ycombinator.com/item?id=17781927 https://news.ycombinator.com/item?id=17781927 & wikipedia links to systems theory