Community-maintained, open-source threat libraries that power Fork Community Edition for building risk-centric threat models with the PASTA methodology.
This repository provides a collaborative space for enhancing and expanding the capabilities of Fork through community contributions. It consolidates previous work, including the attack trees shared by VerSprite, which are now available for you as industry and technology focused threat libraries.
Fork is a SaaS platform that implements the Process for Attack Simulation and Threat Analysis framework for threat modeling. Our goal is to create a tool that not only serves the needs of security professionals but also evolves with the contributions of the community. The community version is freely available and designed with extensibility in mind, allowing the community to contribute and enhance various parts. Meanwhile, the enterprise edition aims to cater to organizations with more advanced functionalities and tailored features.
Each threat library enumerates threats, the motives behind them, the components they target, and the CWEs that make them possible. From those CWEs, Fork computes the rest of the taxonomy mappings automatically (CAPEC, MITRE ATT&CK and ATLAS, D3FEND, CVE, OWASP ASVS, and NIST SP 800-53) so work here stays focused on the security analysis rather than on cross-referencing catalogs by hand.
Industry-focused threat libraries ├── Automotive [JSON] [Mindmap] ├── Consumer Electronics [JSON] [Mindmap] ├── Energy [JSON] [Mindmap] ├── Financial [JSON] [Mindmap] ├── Fintech - Credit Cards [JSON] [Mindmap] ├── Government [JSON] [Mindmap] ├── Healthcare [JSON] [Mindmap] ├── Higher Education [JSON] [Mindmap] ├── Hospitality [JSON] [Mindmap] ├── Insurance [JSON] [Mindmap] ├── Manufacturing [JSON] [Mindmap] ├── Retail [JSON] [Mindmap] ├── Shipping [JSON] [Mindmap] ├── Telecommunication [JSON] [Mindmap] └── Transportation [JSON] [Mindmap] Technology-focused threat libraries └── AI [JSON] [Mindmap]
Our platform is expanding its scope to encompass mapping all relevant taxonomies. In Fork, we strive to provide a holistic approach by integrating both theory and evidence methodologies. Fork’s evidence-based approach complements your threat models and helps identify additional Tactics, Techniques, and Procedures (TTPs) for consideration in the attack tree. These adversarial methods are derived from real-world attacks observed and reported by legitimate sources.
Fork is incorporating threats and adversarial methods derived from multiple categories of observed behavior:
- TTPs used against your Technology Platform(s)
- Software used maliciously against your Industry
- Campaign(s) targeting your Industry
- Issue Tracker: A dedicated system for reporting issues, suggesting enhancements, and discussing project-related matters.
- Community Contributions: Members can contribute to JSON files that constitute the basis of a threat library, which are integral to Fork's functionality.
- Automatic Updates: Changes to the JSON files that pass the peer-review process will be reflected in the platform with each new release, ensuring up-to-date threat modeling capabilities.
- Clone the Repository:
git clone git@github.com:VerSprite/forkTM.git - Explore the JSON Files: Contribute to our threat libraries to enhance the platform's threat modeling capabilities.
- Report Issues or Suggestions: Use the GitHub Issues tab to report bugs, request features, or discuss the project.
- Contribute: Make changes to the JSON files and submit a pull request. Our team will review and integrate contributions in the next release.
For further inquiries or direct communication, please contact forktm@versprite.com.
A special thanks to all the contributors who have made Fork a reality. Your efforts are deeply appreciated!
Happy Threat Modeling!
The Fork Team