🚨 Threat Modeling Risk Pipeline

A lightweight yet powerful threat modeling and risk scoring pipeline that fuses
STRIDE 🧩 + CVSS v3.1 📊 + DREAD 🔥 to dynamically assess and rank security threats.

This project moves beyond static spreadsheets and computes risk programmatically, mirroring how real-world security teams reason about threats.

🔍 What This Project Does

The pipeline automatically:

1. 📥 Ingests threats from a structured CSV file
2. 🧠 Infers STRIDE threat categories
3. ⚙️ Calculates CVSS v3.1 severity
4. 🎯 Derives DREAD scores using heuristic mappings
5. 🚦 Produces a final Low / Medium / High risk classification

All scoring is computed in code — no hard-coded DREAD tables.

📁 Project Structure

• risk_pipeline.py
  Core engine that performs CVSS scoring, DREAD calculation, and risk aggregation.

• threats.csv
  Simple input file containing threat names.

• results.csv
  Auto-generated output with computed risk scores (intentionally ignored in Git).

📤 Output Format (results.csv)

STRIDE – Threat category

CVSS Severity – Industry-standard impact rating

DREAD – D/R/E/A/D breakdown

Total Score – Risk aggregation (max 50)

Final Risk – 🚦 Low / Medium / High

'''Make sure risk_pipeline.py and threats.csv are in the same directory.

python risk_pipeline.py

Boom 💥 — results.csv is generated.'''

⚠️ Disclaimer

This tool is designed for educational and analytical purposes. Risk scores are heuristic and should complement — not replace — formal security assessments.

Author(s): Chakrinee Ayalasomayajula