🍍 SeaSponge is an accessible threat modelling tool from Mozilla

Перейти к файлу

Glavin Wiechert d97598c7b5 fix(draw-route): fix typo for "add assumptions" Fixes #68		2015-04-02 15:25:41 -03:00
app	fix(draw-route): fix typo for "add assumptions"	2015-04-02 15:25:41 -03:00
test	feat(draw-route): Add multiple Diagrams support	2014-12-17 15:10:30 -04:00
.bowerrc	feat(app): Generated Angular project in CoffeeScript.	2014-08-10 14:28:27 -03:00
.editorconfig	feat(app): Generated Angular project in CoffeeScript.	2014-08-10 14:28:27 -03:00
.gitattributes	feat(app): Generated Angular project in CoffeeScript.	2014-08-10 14:28:27 -03:00
.gitignore	feat(app): Generated Angular project in CoffeeScript.	2014-08-10 14:28:27 -03:00
.jshintrc	feat(app): Generated Angular project in CoffeeScript.	2014-08-10 14:28:27 -03:00
.travis.yml	feat(deploy): add Travis CI directory cache to improve build speed	2014-11-10 09:24:27 -04:00
AUTHORS	docs(package.json): Add missing fields to package.json	2014-08-10 17:41:15 -03:00
CHANGELOG.md	feat(changelog): Add Grunt task for generating Changelog	2014-08-10 17:55:26 -03:00
CONTRIBUTING.md	chore(repository): Updated Contributing Guide and README	2014-09-27 10:42:52 -03:00
DEVGUIDE.md	chore(app): Initial devguide	2015-03-25 11:09:52 -03:00
Gruntfile.coffee	chore(app): Temporary fix to image file renaming	2015-03-11 11:38:22 -03:00
LICENSE	Initial commit	2014-08-04 15:43:51 -04:00
README.md	chore(readme): add link to usage page in wiki	2015-04-02 14:27:48 -03:00
bower.json	feat(diagram-export-image): complete support for Diagram to Image	2014-12-17 23:57:51 -04:00
deploy.sh	fix(deploy): mute errors from git stash in deploy.sh	2014-11-30 12:45:37 -04:00
package.json	test(all): temporarily removed testing from package.json	2014-10-29 01:45:53 -03:00

README.md

SeaSponge

SeaSponge is an accessible web-based threat modeling tool developed for Mozilla Winter of Security 2014.

About

This web-based application is being developed with three characteristics in mind:

Accessibility: We want everyone to be able to map out their infrastructures and generate security reports on any operating-system and on any browser.
Aesthetics: We're tired of clunky, boring interfaces - we want to bring the pizazz into threat-modeling.
Intuitive User-Experience: We hate manuals, and we want you to be able to use this software without one.

Please see http://mozilla.github.io/seasponge/ for a live demo of the application.
There is also a video on Air Mozilla available at https://air.mozilla.org/mozilla-winter-of-security-seasponge-a-tool-for-easy-threat-modeling/

Example Threat Model developed with SeaSponge

Here is a share link for the SeaSponge threat model we developed in our Air Mozilla demo video: http://goo.gl/Q8mt0T

Usage

See our Usage page in our Wiki for more details.

Authors

With Mozilla Advisor Curtis Koenig and Professor Dr. Pawan Lingras

Contributing

Please see our Contributing Guidelines

Dependencies

You may need to prefix commands with sudo

Node.js
- Bower npm install -g bower
- Grunt npm install -g grunt-cli
- Yeoman npm install -g yo
  - AngularJS Generator npm install -g generator-angular
Ruby
- Linux users may also need ruby-dev via sudo apt-get install ruby-dev
- Sass gem install sass
- Compass >=0.12.2 gem install compass

After forking and cloning the repository in the location of your choice run the following commands to install your Node.js and Bower dependencies.

npm install
bower install

Building

Once you have the application and dependencies installed you can start building the app.

grunt build # builds the application to /dist
grunt serve # previews the app on a local server

Developing

Please see the Development Guide