OWASP / OdTM
OWASP Ontology-driven Threat Modelling framework
☆37Updated last year
Alternatives and similar repositories for OdTM:
Users that are interested in OdTM are comparing it to the libraries listed below
- StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different so…☆50Updated this week
- This repository holds the necessary content to produce the D3FEND ontology distribution.☆65Updated this week
- Development of the NIST vulnerability data ontology (Vulntology).☆37Updated 10 months ago
- Security Control Knowledge Graph☆28Updated 11 months ago
- OWASP Foundation Web Respository☆29Updated 2 years ago
- Public static website for the D3FEND project. For the D3FEND ontology repo see: https://github.com/d3fend/d3fend-ontology☆76Updated 3 weeks ago
- Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …☆61Updated 8 months ago
- Mappings Explorer enables cyber defenders to understand how security controls and capabilities map onto the adversary behaviors catalogue…☆56Updated 2 weeks ago
- A Crowdsourcing Exchange for mapping various sources of security vulnerabilities, exposures, threats, and controls data☆26Updated 5 years ago
- A MAL language that demonstrates the Maven project structure☆23Updated 3 years ago
- Posture Attribute Collection and Evaluation☆23Updated last year
- Global Security Database Tools☆42Updated last year
- A Risk-Based Prioritization Taxonomy for prioritizing CVEs (Common Vulnerabilities and Exposures).☆72Updated 10 months ago
- This repository is for development of the Unified Cyber Ontology.☆89Updated this week
- OASIS-TAC-TC: OWL representation of the TAC TCs work products are maintained here. - https://github.com/oasis-tcs/tac-ontology☆16Updated 3 years ago
- An application allowing users to explore, create, annotate, and share extensions of the MITRE ATT&CK® knowledge base. This repository con…☆45Updated this week
- Stakeholder-Specific Vulnerability Categorization☆140Updated this week
- InfoSec OpenAI Examples☆19Updated last year
- Exploit Prediction Scoring System (EPSS)☆25Updated 2 years ago
- Sensor Mappings to ATT&CK is a collection of resources to assist cyber defenders with understanding which sensors and events can help det…☆49Updated this week
- OCA-wide documentation shared by all sub-projects and repositories☆33Updated 4 months ago
- Scripts to import OSCAL example content into the Neo4J graph database☆28Updated 2 years ago
- Structured Threat Intelligence Graph☆90Updated last week
- ☆19Updated 4 years ago
- CISA CSAF Security Advisories☆66Updated this week
- ☆16Updated last year
- CVSS v4.0 calculator☆29Updated 7 months ago
- OASIS Cyber Threat Intelligence (CTI) TC: A tool for generating STIX content for prototyping and testing. https://github.com/oasis-open/c…☆41Updated 11 months ago
- Computer Aided Integration of Requirements and Information Security - Server☆156Updated 7 months ago
- OWASP Threat Dragon core files☆28Updated 3 years ago