Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Revise data model of threat + mitigations #834

Open
jgadsden opened this issue Jan 10, 2024 · 1 comment
Open

Revise data model of threat + mitigations #834

jgadsden opened this issue Jan 10, 2024 · 1 comment
Labels
enhancement New feature or request version-3.x

Comments

@jgadsden
Copy link
Collaborator

Describe what problem your feature request solves:
Multiple mitigations for a threat are possible, and also multiple threats per mitigations

Describe the solution you'd like:
revise data model of threat and mitigations to be more flexible

Additional context:
User reports:
"The data model for threat mitigations is in my opinion simply incorrrect. One threat may have many mitigations, which has different implementation status. At this moment the tool seems to allow tracking only one mitigation per threat.

Not being able to copy or move threats makes impossible to refactor the environment image later on. I would take even "make a copy of this threat to there" without any linking of contents to fix this. Without this I had to redraw the environment and do a lot of manual work to get the final report cleaned up."

@jgadsden jgadsden added enhancement New feature or request version-2.2 labels Jan 10, 2024
@jgadsden jgadsden modified the milestones: Version 2.2, Version 2.3 Mar 23, 2024
@jgadsden jgadsden removed this from the Version 2.3 milestone Jul 15, 2024
@jgadsden
Copy link
Collaborator Author

I agree that the schema / data model of threat dragon is not a good one
we are looking at revising the file format, schema and data model in #716 and also #850

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request version-3.x
Projects
None yet
Development

No branches or pull requests

1 participant