US Patent 7891003 Enterprise threat modeling

A threat modeling application generates threats to a business application. The threat modeling application receives user input associated with business application data. The input may be received through an interface provided by the threat modeling application. Threats are automatically generated from the received data and an attack library. The attack library includes information regarding attacks and related countermeasures. By automatically generating threats based on business application information, the threat modeling application can generate security threats consistently and objectively.