Patent ID: 8732838

Claim:
One or more computer storage devices storing computer-executable components for evaluating a threat model for an information system, said components comprising: an interface component that when executed causes at least one processor to access a data flow diagram for an information system, said data flow diagram comprising a plurality of elements arranged to describe a flow of data through the information system, said interface component further accessing a threat model corresponding to the data flow diagram, said threat model having one or more threat types corresponding to each of said plurality of elements; a model component that when executed causes at least one processor to evaluate a description in the threat model of each of the threat types for each of the corresponding elements to generate a completeness factor for the threat type, wherein the model component evaluates the description in the threat model at least by identifying one or more of the following associated with one of the elements and having a threat type: empty threats, undescribed threats, and unmitigated threats; a structural component that when executed causes at least one processor to evaluate connections between the elements in the data flow diagram accessed by the interface component to generate a validity factor for each of the threat types; and a report component that when executed causes at least one processor to determine a progress factor for each of the threat types based on the completeness factor generated by the model component and the validity factor generated by the structural component, wherein the interface component provides the progress factor determined by the report component for each of the threat types to a user as an indication of effectiveness of the threat model.