IriusRisk updated threat modeling platform offers ‘new level of sophistication’

Published: Friday, 03 December 2021 09:40

IriusRisk has launched V4 of its automated threat modeling platform, which includes a new user interface, visualization tools, and advanced analytics. The new version of the platform is designed to make it easier than ever before for teams to generate threat models of systems, share them collaboratively across their organization, and demonstrate the impact of improved software security to executives within the business.

The updates to the IriusRisk platform in Version 4 include:

A new user interface: the more flexible, intuitive front-end allows for quicker access to and easier grouping of functional elements of the IriusRisk platform – which speeds up the process of creating and assessing threat models. New user profiles also allow developers and security personnel to more easily manage their details within the platform.

New diagram design: improved diagram styling reduces the visual load for the user, increases the consistency of visual information, and has improved accessibility and support for users with visual impairments. This helps teams to better identify the relationship between components in a diagram, quickly identify the important information, and ultimately derive more actionable insights from visualizations in the platform.

Components and collaboration: software systems are increasingly interdependent - where a system created by one team could be consumed and used by many other teams.  With IriusRisk V4 these relationships can now be reflected in the threat models so that an entire system, with its internal threats modeled in IriusRisk, can be published as a component for other teams to use. This published component will be visible in the component palette so that it can be included in other threat models as a pre-defined component.

Advanced analytics: a new embedded analytics and reporting system offers the power and flexibility of external business intelligence tools inside IriusRisk. The ability to automatically generate reports on-demand across the entire IriusRisk dataset also enables teams to better present the ROI and progress of threat modeling to senior leadership.