Threat modeling helps cybersecurity professionals visualize and better understand their network environment and data flow. Threat modeling can be a critical aspect of software and system design. This can allow secure coding practices to be implemented in the software or system design.
The Microsoft Threat Modeling Tool 2016 is a free tool that helps cybersecurity professionals. The tool includes a variety of modules such as template editors, threat grids, and data flow diagrams. These features are interactive and require user input. Once a system is defined into the tool, the Microsoft Threat Modeling Tool 2016 displays a representation of the threats using threat grids and data flow diagrams. Users can then work with the threats shown as well as include additional threats they feel are appropriate, in order to create workable models that change and improve over time.
Cybersecurity professionals can also use the tool to perform "what if" scenarios to see what would happen if they made a change or added some systems and devices to the network.