Search code examples
xmlgraphmlthreat-model

Automatically Generating Microsoft Threat Modeling Tool model

I have a context model in GraphML that I want to import into the Microsoft Threat Modeling Tool (MTMT).

After looking into the XML file used to represent the model it looks unreadable/hashed in some way.

I want to be able to generate a (generic) MTMT model from my graphml model

I am unable to find any documentation for the XML model of MTMT.

Does someone here have knowledge of the MTMT XML files that can help me with the parsing needed to create a tool to translate graphml to MTMT XML model?

Solution

  • See Open Threat Modeling Templates,

    Assigning new Templates to a Model:

    Each threat model has its own template (.tm7 file) assigned to it via a unique id. Unfortunately this ID cannot be changed from within the tool itself. To adapt a new template to an existing model you therefore need to change the template ID manually by opening the file within a text editor. Luckily, both template and model are XML based.

    by Matthias Rohr based on his talk at OWASP AppSec EU 2016 (slides here).