reorg of folder for IriusRisk

OWASP · Jun 7, 2019 · 09a8fa7 · 09a8fa7
1 parent 635d2b3
commit 09a8fa7
Show file tree

Hide file tree

Showing 8 changed files with 21 additions and 19 deletions.
diff --git a/...eb App - Threat Model and Risk Report.pdf → ...eb App - Threat Model and Risk Report.pdf b/...eb App - Threat Model and Risk Report.pdf → ...eb App - Threat Model and Risk Report.pdf
diff --git a/...ountermeasure-as-jira-ticket- Example.png → ...ountermeasure-as-jira-ticket- Example.png b/...ountermeasure-as-jira-ticket- Example.png → ...ountermeasure-as-jira-ticket- Example.png
diff --git a/...pp-IriusRisk-Example/Dataflow Diagram.png → ...sRisk/3-Tier-Web-App/Dataflow Diagram.png b/...pp-IriusRisk-Example/Dataflow Diagram.png → ...sRisk/3-Tier-Web-App/Dataflow Diagram.png
diff --git a/...-Tier-Web-App-IriusRisk-Example/README.md → IriusRisk/3-Tier-Web-App/README.md b/...-Tier-Web-App-IriusRisk-Example/README.md → IriusRisk/3-Tier-Web-App/README.md
@@ -1,19 +1,19 @@
-# Example of a Threat Model of a fictitious 3 Tier Web Application
-
-This fictitious application exposes a Web UI on the internet and has a Web API and Database hosted on a public cloud provider.
-
-## Contents
-### What are we building?
-- See the Dataflow Diagram.png
-- The first few pages of the Threat Model and Risk Report PDF file contain the answers to questions that define how the individual components behave and are configured.
-
-### What can go wrong?
-- See the Table of Threats
-- The last section of the PDF report contains a table of threats, the planned mitigation and the status of the countermeasure progress
-
-### What are we going to do about it?
-- The last section of the PDF report contains a table that describes how each of the threats are going to be mitigated (if at all).  
-- In the same PDF report, the "Risks Accepted" table describes risks that are not going to be mitigated.
-
-### Did we do a good job?
+# Example of a Threat Model of a fictitious 3 Tier Web Application
+
+This fictitious application exposes a Web UI on the internet and has a Web API and Database hosted on a public cloud provider.
+
+## Contents
+### What are we building?
+- See the Dataflow Diagram.png
+- The first few pages of the Threat Model and Risk Report PDF file contain the answers to questions that define how the individual components behave and are configured.
+
+### What can go wrong?
+- See the Table of Threats
+- The last section of the PDF report contains a table of threats, the planned mitigation and the status of the countermeasure progress
+
+### What are we going to do about it?
+- The last section of the PDF report contains a table that describes how each of the threats are going to be mitigated (if at all).  
+- In the same PDF report, the "Risks Accepted" table describes risks that are not going to be mitigated.
+
+### Did we do a good job?
 - This is not answered by an output from this threat modeling tool.
diff --git a/...ble of Countermeasures_3-tier-web-app.xls → ...ble of Countermeasures_3-tier-web-app.xls b/...ble of Countermeasures_3-tier-web-app.xls → ...ble of Countermeasures_3-tier-web-app.xls
diff --git a/...ample/Table of Threats_3-tier-web-app.xls → ...b-App/Table of Threats_3-tier-web-app.xls b/...ample/Table of Threats_3-tier-web-app.xls → ...b-App/Table of Threats_3-tier-web-app.xls
diff --git a/IriusRisk/README.md b/IriusRisk/README.md
@@ -0,0 +1,3 @@
+Examples using the IriusRisk threat modeling tool from ContinuumSecurity.
+
+https://continuumsecurity.net/threat-modeling-tool/
diff --git a/samples/README.md b/samples/README.md