“The XORCISM Model is built around various Open Information Security Data Models, Specifications, Standards, Frameworks, Guidelines, Architectures, Best Practices, Protocols and Vocabularies (Taxonomies/Ontologies).“ XORCISM project website is available at the following link.
“The Software Assurance Maturity Model (SAMM) is an open framework to help organizations formulate and implement a strategy for software security that is tailored to the specific risks facing the organization. SAMM helps you: Evaluate an organization’s existing software security practices Build a balanced software security assurance program in well-defined iterations Demonstrate concrete improvements to a security assurance program Define and measure security-related activities throughout an organization” Software Assurance Maturity Model (SAMM) can be download from the following link.
“Microsoft Threat Modeling Tool 2016 is a tool that helps in finding threats in the design phase of software projects. It's available as a free download from the Microsoft Download Center. This latest release simplifies working with threats and provides a new editor for defining your own threats. Microsoft Threat Modeling Tool 2016 has several improvements such as New Threat Grid, Template Editor & Migrating Existing Data Flow Diagrams. “ Microsoft Threat Modeling Tool 2016 can be download from the following link. Attached bellow a sample screen shots of Microsoft Threat Modeling Tool 2016: