Iām sharing a card game that I created for threat modelling called āThreat Agentsā. It takes the principles of STRIDE and provides a structure and quirkiness to make it more accessible.
Whilst I got one copy properly manufactured for my own use at work, I donāt have any physical copies to sell but you can download the images for the cards plus instructions and a ādefendersā sheet from here: https://www.r-adams.co.uk/threatagents/
Threat modelling is a valuable exercise to identify vulnerabilities in your software and is also a great way to learn about your solution. However people can seem a little daunted by it. I was on my first time. With this game I hope to make it a little easier to get started in threat modelling and hopefully (even) more fun. If you arenāt familiar with threat modelling then thereās several wonderful talks on Ministry of Testing that Iād recommend checking out. (They are actually what got my interested in CyberSecurity)
Why would you open source this? I donāt understand much about this whole area, and find security rather hard when it comes to building and making practical checks, but that just sounds like a thing to jump on for people wanting to get into it all. Very cool.
Honestly, the work to sell it seemed a bit much as selling it at a decent price means Iād need to get a LOT of copies manufactured, stored and distributed when I just want to get my idea out there.
That all said, Iām pretty sure that whilst the CC license I used prohibits anyone reselling the game, it doesnāt stop me from making a commercial version down the line. So never say never! After all, Elevation of Privileges can be downloaded or you can buy a deck.
After mulling over feedback from @conrad.braam and a few others, I do hope to look at selling copies as I get the impression that people would prefer this to having to cobble together their own copies! (providing I can keep the price to under Ā£20).
Wow I love this idea!! I will definitly spread the wordā:wink:
Btw. the online version is not properly displayed on my phone.
Good luck with this project and keep goingā:sunglasses:
Bringing up an old thread but the links here are out of date and I donāt think I can edit the original post. If you go to threatagentsgame.com then you can find links to buy the decks or play the online version.
There may be another place soon. Somewhere people are familiar withā¦
