smaresca / seasponge

Accessible and client-side threat modeling tool

SeaSponge

SeaSponge is an accessible web-based threat modeling tool developed for Mozilla Winter of Security 2014.

---

About

This web-based application is being developed with three characteristics in mind:

• Accessibility: We want everyone to be able to map out their infrastructures and generate security reports on any operating-system and on any browser.
• Aesthetics: We're tired of clunky, boring interfaces - we want to bring the pizazz into threat-modeling.
• Intuitive User-Experience: We hate manuals, and we want you to be able to use this software without one.

Please see http://mozilla.github.io/seasponge/ for a live demo of the application.

Authors

• Mathew Kallada
• Glavin Wiechert
• Joel Kuntz
• Sarah MacDonald

With Mozilla Advisor Curtis Koenig and Professor Dr. Pawan Lingras

Contributing

Please see our Contributing Guidelines

Dependencies

You may need to prefix commands with sudo

• Node.js
  • Bower npm install -g bower
  • Grunt npm install -g grunt-cli
  • Yeoman npm install -g yo
    • AngularJS Generator npm install -g generator-angular
• Ruby
  • Linux users may also need ruby-dev via sudo apt-get install ruby-dev
  • Sass gem install sass
  • Compass >=0.12.2 gem install compass

After forking and cloning the repository in the location of your choice run the following commands to install your Node.js and Bower dependencies.

npm install
bower install

Building

Once you have the application and dependencies installed you can start building the app.

grunt build # builds the application to /dist
grunt serve # previews the app on a local server

Developing

Please see the Development Guide

Links

• Mozilla Wiki Page
• GitHub Project Wiki