I couldn't run Microsoft's Threat Modeling Tool on my Mac, so I rebuilt it for the browser

Описание и применение

Автор создал ThreatSketch – браузерное приложение, которое генерирует угрозы по шаблону Microsoft Threat Modeling Tool, но работает на macOS, Windows и Linux, уменьшая размер установки и сохраняя совместимость с Threat Dragon.

Задача

Microsoft's Threat Modeling Tool (TMT) only runs on Windows, preventing macOS users from using it in a cybersecurity course.

Результат

ThreatSketch delivers TMT’s threat generation in a lightweight, cross‑platform browser app, reducing download size from 100 MB to 22 MB and installation size from 236 MB to 44 MB, while maintaining compatibility with Threat Dragon files and TMT workflows.

Рабочий процесс

• Draw a data‑flow diagram in ThreatSketch (or Threat Dragon)
• The Python engine (via Pyodide) parses the TMT .tb7 template and evaluates its rules
• The engine determines trust boundaries and generates threats
• Threats are merged into the model without overwriting edits
• Students triage threats, export reports, and save .tm7 files

Доказательства

TMT only runs on Windows

Источник

ThreatSketch saves Threat Dragon's JSON, so a model still opens in Threat Dragon

Источник

The Python engine runs unchanged in the browser through Pyodide

Источник

ThreatSketch 0.6 download 22 MB, installed 44 MB vs Threat Dragon 100 MB download, 236 MB installed

Источник