New Dataflow library in IriusRisk v4.6
We've released a new "IR Dataflow Library'' in v4.6, designed to take advantage of the IriusRisk rules engine to provide dynamic behavior on threat models.
See More
Product Update: Release 4.6
IriusRisk 4.6 includes: dataflows created from security groups for Terraform AWS; Easily apply a library to all projects
IriusRisk launches infrastructure-as-code to enable automatic threat modeling of cloud-native designs
IaC enables developers or operational teams to automatically manage and provision security architecture, doing away with the need to manually configure software-defined infrastructure.
IEC/ANSI 62443 Example 5 - Embedded Device Requirements
The main focus of this exercise is to identify and evaluate an embedded device’s threats, weaknesses and controls directly related to it; subsequent systems or services that are inter-connected are excluded.
Product Update: Release 4.5
IriusRisk 4.5 includes: Custom icons for component definitions; Visio import API; Dashboard showing projects with the highest risk & gauge of overall risk
Accelerating and Securing Your Cloud Modernization Journey
As many organizations accelerate their Cloud Modernization journey to ensure that they provide the best customer experience and compete with cloud-native market entrants, they’re adopting new tools and processes that allow them to scale rapidly and reduce duplication and resource requirements.
STRIDE and CAPEC with IriusRisk
Enabling organizations to rapidly accelerate their threat modeling process by helping them to map; threats, and their appropriate mitigation.
Threat modeling workflow for AWS Cloudformation architectures using IriusRisk
IaC defined architectures can be a powerful way for developers to shift left and achieve cloud security and compliance in a positive, proactive manner.
Threat modeling workflow for Terraform defined architectures using IriusRisk
Terraform is an open-source infrastructure as code software tool created by HashiCorp. Terraform enables you to create, maintain and improve infrastructure reliably and predictably on major infrastructure cloud providers (e.g. AWS, GCP, Azure, OpenStack, CloudStack).
Threat Modeling Club Live! Securing a Lifetime of Learning with Pearson
In this month's IriusRisk Threat Modeling Club Live! we discuss how Pearson, one of the world’s most trusted and innovative online education and learning organizations, has adopted collaborative Threat Modeling across some of their online service portfolio using IriusRisk.
Product Update: Release 4.4
IriusRisk v4.4 contains some really useful improvements, including: A new summary section in the Compliance Report