initial commit

.gitattributes

@@ -0,0 +1,63 @@
+###############################################################################
+# Set default behavior to automatically normalize line endings.
+###############################################################################
+* text=auto
+
+###############################################################################
+# Set default behavior for command prompt diff.
+#
+# This is need for earlier builds of msysgit that does not have it on by
+# default for csharp files.
+# Note: This is only used by command line
+###############################################################################
+#*.cs     diff=csharp
+
+###############################################################################
+# Set the merge driver for project and solution files
+#
+# Merging from the command prompt will add diff markers to the files if there
+# are conflicts (Merging from VS is not affected by the settings below, in VS
+# the diff markers are never inserted). Diff markers may cause the following 
+# file extensions to fail to load in VS. An alternative would be to treat
+# these files as binary and thus will always conflict and require user
+# intervention with every merge. To do so, just uncomment the entries below
+###############################################################################
+#*.sln       merge=binary
+#*.csproj    merge=binary
+#*.vbproj    merge=binary
+#*.vcxproj   merge=binary
+#*.vcproj    merge=binary
+#*.dbproj    merge=binary
+#*.fsproj    merge=binary
+#*.lsproj    merge=binary
+#*.wixproj   merge=binary
+#*.modelproj merge=binary
+#*.sqlproj   merge=binary
+#*.wwaproj   merge=binary
+
+###############################################################################
+# behavior for image files
+#
+# image files are treated as binary by default.
+###############################################################################
+#*.jpg   binary
+#*.png   binary
+#*.gif   binary
+
+###############################################################################
+# diff behavior for common document formats
+# 
+# Convert binary document formats to text before diffing them. This feature
+# is only available from the command line. Turn it on by uncommenting the 
+# entries below.
+###############################################################################
+#*.doc   diff=astextplain
+#*.DOC   diff=astextplain
+#*.docx  diff=astextplain
+#*.DOCX  diff=astextplain
+#*.dot   diff=astextplain
+#*.DOT   diff=astextplain
+#*.pdf   diff=astextplain
+#*.PDF   diff=astextplain
+#*.rtf   diff=astextplain
+#*.RTF   diff=astextplain

.gitignore

@@ -0,0 +1,202 @@
+## Ignore Visual Studio temporary files, build results, and
+## files generated by popular Visual Studio add-ons.
+
+# User-specific files
+*.suo
+*.user
+*.sln.docstates
+
+# Build results
+[Dd]ebug/
+[Dd]ebugPublic/
+[Rr]elease/
+x64/
+build/
+bld/
+#[Bb]in/
+[Oo]bj/
+
+# Roslyn cache directories
+*.ide/
+
+# MSTest test Results
+[Tt]est[Rr]esult*/
+[Bb]uild[Ll]og.*
+
+#NUNIT
+*.VisualState.xml
+TestResult.xml
+
+# Build Results of an ATL Project
+[Dd]ebugPS/
+[Rr]eleasePS/
+dlldata.c
+
+*_i.c
+*_p.c
+*_i.h
+*.ilk
+*.meta
+*.obj
+*.pch
+*.pdb
+*.pgc
+*.pgd
+*.rsp
+*.sbr
+*.tlb
+*.tli
+*.tlh
+*.tmp
+*.tmp_proj
+*.log
+*.vspscc
+*.vssscc
+.builds
+*.pidb
+*.svclog
+*.scc
+
+# Chutzpah Test files
+_Chutzpah*
+
+# Visual C++ cache files
+ipch/
+*.aps
+*.ncb
+*.opensdf
+*.sdf
+*.cachefile
+
+# Visual Studio profiler
+*.psess
+*.vsp
+*.vspx
+
+# TFS 2012 Local Workspace
+$tf/
+
+# Guidance Automation Toolkit
+*.gpState
+
+# ReSharper is a .NET coding add-in
+_ReSharper*/
+*.[Rr]e[Ss]harper
+*.DotSettings.user
+
+# JustCode is a .NET coding addin-in
+.JustCode
+
+# TeamCity is a build add-in
+_TeamCity*
+
+# DotCover is a Code Coverage Tool
+*.dotCover
+
+# NCrunch
+_NCrunch_*
+.*crunch*.local.xml
+
+# MightyMoose
+*.mm.*
+AutoTest.Net/
+
+# Web workbench (sass)
+.sass-cache/
+
+# Installshield output folder
+[Ee]xpress/
+
+# DocProject is a documentation generator add-in
+DocProject/buildhelp/
+DocProject/Help/*.HxT
+DocProject/Help/*.HxC
+DocProject/Help/*.hhc
+DocProject/Help/*.hhk
+DocProject/Help/*.hhp
+DocProject/Help/Html2
+DocProject/Help/html
+
+# Click-Once directory
+publish/
+
+# Publish Web Output
+*.[Pp]ublish.xml
+*.azurePubxml
+## TODO: Comment the next line if you want to checkin your
+## web deploy settings but do note that will include unencrypted
+## passwords
+#*.pubxml
+
+# NuGet Packages Directory
+packages/*
+## TODO: If the tool you use requires repositories.config
+## uncomment the next line
+#!packages/repositories.config
+
+# Enable "build/" folder in the NuGet Packages folder since
+# NuGet packages use it for MSBuild targets.
+# This line needs to be after the ignore of the build folder
+# (and the packages folder if the line above has been uncommented)
+!packages/build/
+
+# Windows Azure Build Output
+csx/
+*.build.csdef
+
+# Windows Store app package directory
+AppPackages/
+
+# Others
+sql/
+*.Cache
+ClientBin/
+[Ss]tyle[Cc]op.*
+~$*
+*~
+*.dbmdl
+*.dbproj.schemaview
+*.pfx
+*.publishsettings
+node_modules/
+
+# RIA/Silverlight projects
+Generated_Code/
+
+# Backup & report files from converting an old project file
+# to a newer Visual Studio version. Backup files are not needed,
+# because we have git ;-)
+_UpgradeReport_Files/
+Backup*/
+UpgradeLog*.XML
+UpgradeLog*.htm
+
+# SQL Server files
+*.mdf
+*.ldf
+
+# Business Intelligence projects
+*.rdl.data
+*.bim.layout
+*.bim_*.settings
+
+# Microsoft Fakes
+FakesAssemblies/
+
+# LightSwitch generated files
+GeneratedArtifacts/
+_Pvt_Extensions/
+ModelManifest.xml
+
+# Ignore the bower packages folder since these contain lots of files
+# Including them causes massive CPU usage due to file watching
+
+td/bower-packages/
+td/[Oo]bj/
+#td/[Bb]in/
+td/node_modules/
+threatdragon.tests/node_modules/
+threatdragon.tests/[Oo]bj/
+*/.ntvs_analysis.dat
+td/.ntvs_analysis.dat
+threatdragon.tests/.ntvs_analysis.dat

README.md

@@ -0,0 +1,55 @@
+# [OWASP](https://www.owasp.org) Threat Dragon #
+
+An online threat modelling web application including system diagramming and a rule engine to auto-generate threats/mitigations. 
+The focus will be on great UX, a powerful rule engine and integration with other development lifecycle tools.
+
+We are currently maintaining [a working protoype](http://babydragon.azurewebsites.net/#/) in sych with the main code branch.
+
+An [OWASP Incubator Project](https://www.owasp.org/index.php/OWASP_Threat_Dragon).
+
+**Project leader:** Mike Goodwin (mike.goodwin@owasp.org)
+
+##Getting started
+
+ThreatDragon is a Single Page Application (SPA) using Angular on the client and node.js on the server, althought the server side code does almost nothing so far.
+To build and run locally, follow these steps:
+
+Install Git and node.js. Threat Dragon uses Grunt for its build workflow, so
+
+`npm install -g grunt-cli`
+
+To get the code, go to where you want your code to be located and do
+
+`git init`
+
+`git clone https://bitbucket.org/theblacklabrador/threatmodellingtool.git`
+
+This installs code in two sub-folders. One for the main application (`td`) and one for the unit tests (`threatdragon.tests`). In the `td` folder get all the node
+packages:
+
+`npm install`
+
+All the build workflow task are in the default grunt task, so just do
+
+`grunt`
+
+and then start the node web serverdie td
+
+
+`node bin\www`
+
+If you then browse to `http://localhost:3000` you should see the running application.
+
+##Running the unit tests
+
+The unit tests are written using Jasmine and can be run with Karma using a Grunt task. Install recent versions of Chrome, Firefox and IE. To install all packages for the unit tests go to the `threatdragon.tests` folder and do
+
+`npm install`
+
+then run the tests using
+
+`grunt`
+
+Note: If you are on Windows and are having problems installing Karma, the simplest way to resolve this seems to be to install Python v2.7.x (not v3+) and then install Visual Studio Express as per the SO answer suggested in [this link](http://codedmi.com/questions/298619/npm-install-g-karma-error-msb4019-the-imported-project-c-microsoft-cpp-defau). This sounds mad, but the alternative is a world of pain installing various patches and components one by one. At least it's free :o/
+
+More documentation will follow soon...

ThreatModellingTool.sln

@@ -0,0 +1,35 @@
+
+Microsoft Visual Studio Solution File, Format Version 12.00
+# Visual Studio 14
+VisualStudioVersion = 14.0.23107.0
+MinimumVisualStudioVersion = 10.0.40219.1
+Project("{9092AA53-FB77-4645-B42D-1CCCA6BD08BD}") = "BabyDragon_Azure", "td\BabyDragon_Azure.njsproj", "{926F91E5-0963-44E4-A785-03C101B080AD}"
+EndProject
+Project("{9092AA53-FB77-4645-B42D-1CCCA6BD08BD}") = "threatdragon.tests", "threatdragon.tests\threatdragon.tests.njsproj", "{6F3FEC96-4A11-4387-80D4-5CCF6C9B20BC}"
+EndProject
+Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "Solution Items", "Solution Items", "{C35A158F-7E3F-40FB-BBD4-7A8C7D327F5E}"
+	ProjectSection(SolutionItems) = preProject
+		.gitattributes = .gitattributes
+		.gitignore = .gitignore
+		README.md = README.md
+	EndProjectSection
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Release|Any CPU = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{926F91E5-0963-44E4-A785-03C101B080AD}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{926F91E5-0963-44E4-A785-03C101B080AD}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{926F91E5-0963-44E4-A785-03C101B080AD}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{926F91E5-0963-44E4-A785-03C101B080AD}.Release|Any CPU.Build.0 = Release|Any CPU
+		{6F3FEC96-4A11-4387-80D4-5CCF6C9B20BC}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{6F3FEC96-4A11-4387-80D4-5CCF6C9B20BC}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{6F3FEC96-4A11-4387-80D4-5CCF6C9B20BC}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{6F3FEC96-4A11-4387-80D4-5CCF6C9B20BC}.Release|Any CPU.Build.0 = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal

td/.bowerrc

@@ -0,0 +1,3 @@
+{
+  "directory": "bower-packages"
+}