OWASP Threat Dragon Downloads
note that this page is out of date, see the latest version 1.x documentation
Install
The desktop and web application versions of Threat Dragon can be downloaded from the OWASP GitHub area, with version 1.6.1 being the latest version. See the install instructions for the desktop versions or the web application version.
Supplementary materials
Demonstrations
A good introduction is provided by Mike Goodwin giving a lightning demo during the OWASP Open Security Summit in June 2020.
There is a longer introduction to Threat Dragon provided by the OWASP Spotlight series.
The Threat Modeling Gamification seminar by Vlad Styran shows how using Threat Dragon can make threat modeling fun. Vlad has also provided Threat Modeling with OWASP Threat Dragon in Ukrainian.
OWASP Portland Training Day 2021
The ‘Enter the Dragon’ demonstration model provides a staged example:
- first step is the project creation
- second step has the diagram filled in
- final step includes some threats
There is an accompanying ‘Enter the Dragon’ slide deck in PDF and Libre Office OpenDocument Presentation formats.
OWASP Bristol chapter
Presentation at the Bristol chapter meeting November 2019 in OpenDocument Presentation format
Presentation at the Bristol chapter meeting September 2017, OpenDocument Presentation format abbreviated version and longer version.