Product Update: Release 4.17
Product Update: Release 4.17
We are excited to announce the release of IriusRisk 4.17 which includes these new enhancements and features:
- Choose the best component while diagramming with new component description and risk pattern preview
- Manage diagram components and dataflows faster with improved contextual menus
- Keep focused on risk exceptions with a new countermeasure expiry filter
Choose the best component while diagramming with new component description and risk pattern preview
When creating your threat model diagram, it can sometimes be a challenge to choose the right components to use. Some components can look similar but actually bring in different risk patterns. This can cause confusion which results in spending additional time trying to find more details for each of the components, or having to rework the threat model later. Moreover, many users may not have permission to access the Components Definitions and Trust Zones and Assets objects, where they could find the information they need.
In this release, when you hover over each of the trust zones or components in the left sidebar, a new pop-up window will display the following information:
- The name and description of the component or trust zone
- For components, the risk patterns will be shown grouped by libraries.
- For trust zones, the trust rating will be shown.
Trust Zone Preview:
When hovering over general shapes, the message displayed to the user states that by adding these shapes, they will not generate any threats or countermeasures in the model.
Manage diagram components and dataflows faster with improved contextual menus
In order to provide additional context to the threat model, it is often necessary to answer a questionnaire or edit components and data flows. These actions are available by right-clicking on an element in the diagram. However, the user needs to scroll down to the bottom of the menu to execute these actions.
In this release, we have reorganized these options and simplified the menu. This helps you find options quicker and speed up your tasks while editing the diagram.
Keep focused on risk exceptions with a new countermeasure expiry filter
In our aim to help users manage threats and countermeasures, we added a new filter that helps user show Countermeasures by their Test Expiry Date.
Reduce the threat model output with automatic hiding of N/A countermeasures
Similar to what we already have in the Threats view, we added an option to Hide N/A Countermeasures, and which is turned on by default. By automatically hiding irrelevant countermeasures IriusRisk helps you to manage the threat model output more easily.
Bearer authentication for Jira integration
When setting Jira as an Issue Tracker, at General Settings, Projects, Components, Threats, or Countermeasures, you can now configure IriusRisk to authenticate your connection with your Jira instance via a bearer authentication token.
This release includes the following new SAP components:
- SAP BOBJ (BusinessObjects Business Intelligence Platform)
- SAP BODS (Business Object Data Services)
- SAP MRS (Multi resource Scheduling)
- SAP HR (Human Resources)
- SAP Enterprise Portal
- SAP ALE (Application Link Enabling)
- SAP Application Server
- SAP Content Server
- SAP Gateway
- SAP SLT (Landscape Transformation Replication Server)
We have also continued to expand the output reducing Questionnaires for Functional Components:
- API Endpoint
- Audit Log
- Exception Handler
- File Chooser
- File Handler
- JWT Token
- Private Signature Key
- Reset Password
- User Profile
- User Registration
- Web Form
- XML processing
Finally, we have renamed the default libraries provided by IriusRisk to give them more descriptive names. For example, “CS-Default” is now “IR Software Architecture Components” and “CS-Default-Security-Policies” is now “IR Default Rules for Standards”.
Redmine Issue Tracker has been removed
In February 2023 (v4.12) we notified that the Redmine issue tracker was being removed. It has been removed in this release, v4.17.
ThreadFix Test Import Notice
From September 2023 the import test result functionality for ThreadFix will be removed
For more information, see the Version 4.17 Release Notes.
Shape the future of Threat Modeling with us!
Join IriusRisk Horizon
IriusRisk Horizon - Customer Research, Product Discovery, and Early Access. Join today.