AI-Powered Threat Modelling Extension #1358
-
|
It would be good to build in a generative AI engine into Threat Dragon that suggests threats for a given data flow diagram model. Piotr Kowalczyk has built a Python tool that uses AI to analyses and modify Threat Dragon model - it works outside of the application and directly updates the .json file by generating and adding threats to DFD diagrams. AI-Powered Threat Modeling with OWASP Threat Dragon – Part 2 (along with Part 1) The TD AI Modeler tool is open source and Piotr has provided example threats generated for the threat models We are often asked for help in generating threats, and we have never managed to create an engine that would satisfy this demand. There may be logistics to work through, and it would be great if it was a 'magic wand' provided within Threat Dragon itself, so a lot of discussion involved. |
Beta Was this translation helpful? Give feedback.
Replies: 4 comments
-
Beta Was this translation helpful? Give feedback.
-
|
Hello @InfosecOTB - certainly is a possible. Is this to be tried out for the desktop only, and not yet for the web application version? Is this something that you can take forward @InfosecOTB ? |
Beta Was this translation helpful? Give feedback.
-
|
Hi @jgadsden - I believe that, following your suggestion, we should initially integrate this with the desktop version, as it seems easier in many aspects and we need to start somewhere. However, once it’s working well, I think we should try to address all concerns and eventually do the same for the web version. |
Beta Was this translation helpful? Give feedback.
-
|
Thanks for taking this on @InfosecOTB , we can certainly support you to get this feature into Threat Dragon |
Beta Was this translation helpful? Give feedback.


Hi @jgadsden - I believe that, following your suggestion, we should initially integrate this with the desktop version, as it seems easier in many aspects and we need to start somewhere. However, once it’s working well, I think we should try to address all concerns and eventually do the same for the web version.
I’m happy to take this forward with the community’s help.