I couldn't run Microsoft's Threat Modeling Tool on my Mac, so I rebuilt it for the browser

说明与用途

作者创建了 ThreatSketch，一款基于浏览器的工具，能够在 macOS、Windows 和 Linux 上重现 Microsoft Threat Modeling Tool 的威胁生成，降低下载和安装大小，同时保持文件兼容性。

问题

Microsoft's Threat Modeling Tool (TMT) only runs on Windows, preventing macOS users from using it in a cybersecurity course.

结果

ThreatSketch delivers TMT’s threat generation in a lightweight, cross‑platform browser app, reducing download size from 100 MB to 22 MB and installation size from 236 MB to 44 MB, while maintaining compatibility with Threat Dragon files and TMT workflows.

工作流

• Draw a data‑flow diagram in ThreatSketch (or Threat Dragon)
• The Python engine (via Pyodide) parses the TMT .tb7 template and evaluates its rules
• The engine determines trust boundaries and generates threats
• Threats are merged into the model without overwriting edits
• Students triage threats, export reports, and save .tm7 files

证据

TMT only runs on Windows

来源

ThreatSketch saves Threat Dragon's JSON, so a model still opens in Threat Dragon

来源

The Python engine runs unchanged in the browser through Pyodide

来源

ThreatSketch 0.6 download 22 MB, installed 44 MB vs Threat Dragon 100 MB download, 236 MB installed

来源