Messages

1

Suggestions and Requests / Re: Any plans to add a Threat Modeling feature?

« on: October 19, 2010, 12:24:29 am »

Geert,

I was referring to Threat modeling, which Microsoft has incorporated into their SDLC. They have developed a Security Development Lifecycle (SDL), which includes developing Threat Models for applications.

More information can be found at www.microsoft.com/sdl.

The tool they have developed is tied into Visio, which is single user file based tool and we would like to construct a Threat Model using EA. I am still learning about threat modeling so this information may not be a very good explanation of what is needed.

Basically, you model your application using a Data Flow Diagram (DFD), which EA supports with the exception of being able to draw Threat Boundaries. These are dashed lines that are an arc and any data flow (represented by an EA connector) that intersects a threat boundary needs to be identified as a threat. This is just one of the many features that needs to be provided by the threat model. There are classifications of the threat (acronym STRIDE) which have defined mitigation techniques applied based on the asset that is associated with the data flow (connector). These mitigations are provided on the threat model documentation that is generated from the model.

Each of the EA element types in a DFD is considered as an Asset, which needs to have properties assigned (probably EA Tagged Values) and reported on (which could be handled by creating a document template in EA).

Again, I am still learning about this and there are several features that could be automated with a tool such as EA, but it would be nice if EA could take a look at the features needed and provide something out of the box. Microsoft developed the SDL and the tooling back in 2006-2007 and hasn't done much since then and the tool defintlely does not support multi-user like EA. It would take some commitment on Sparx's part to analyze the process to be able to provide this type of feature and my post was just to inquire if Sparx had anything like this on their radar.

Thanks for your reply and interest.
Tom

2

Suggestions and Requests / Any plans to add a Threat Modeling feature?

« on: October 15, 2010, 12:28:37 am »

We are in the beginning stages of developing a threat modeling process for incorporating into our SDLC. We have looked at a couple of tools available from Microsoft (SDL and TAM) and they both have limitations as far as supporting multi user development.

EA has Data Flow Diagrams, but nothing for constructing an entire threat model. Also, the DFD's do not have an element to support drawing a Trust Boundary.

Does EA have any plans to develop a feature that will support developing Threat Models?

Thanks in advance.
Tom

3

General Board / Repeat Lifeline Element Name Across Pages

« on: July 26, 2011, 12:34:56 am »

Is there any way to repeat the element name of the lifeline at the top of each individual page for a sequence diagram? I have not found any way to do this, except for using the Scale to 1 Page option.

Thanks for any help or suggestions.
Tom

4

General Board / Diagram Question with Generate HTML

« on: October 27, 2010, 08:04:00 am »

I am publishing a model using the Generate HTML option. When viewing the diagrams within IE, the diagrams do not fit within the view of the explorer pane. You have to scroll left and right to see the entire diagram. Also, trying to zoom the window affects the entire browser window and not the diagram within the browser.

Anyone have any suggestions on how to get a diagram to fit within the bounds of the IE pane when generating HTML documentation?

Thanks,
Tom

5

Bugs and Issues / HTML does not Sync TOC when clicking hyperlink

« on: July 27, 2011, 11:39:29 pm »

I have generated a model in HTML. I have a diagram that contains hyperlinks to packages within the model. I also have links to other diagrams. The behavior when clicking one of the hyperlinks is:

The diagram or package properties will be displayed depending on the link that is clicked. However, the TOC in the tree on the left does not navigate to the diagram or package that the link corresponds to.

I can make it work if I expand the parent package first in the tree and then open the diagram that contains the link and click the link.

The diagram that contains the hyperlinks exists below the root package and the hyperlinks are associated with diagrams and packages that are 3 to 4 levels deep within the package structure.

We believe this is a bug within the TOC javascript file, but if anyone has experienced this and has a fix I would greatly appreciate it.

Thanks,
Tom

6

Automation Interface, Add-Ins and Tools / Use DiagramFilter logic within Automation Interfac

« on: May 02, 2012, 01:47:05 am »

Does anyone know if it is possible to use the Hide feature like what the DiagramFilter uses to hide diagram objects within a diagram for specific elements?

I cannot find any property of the DiagramObject Class or the Element class that is used by the DiagramFilter function.

Thanks for any help.

7

Automation Interface, Add-Ins and Tools / Re: Support for Microsoft Visio 2010

« on: February 11, 2011, 02:31:37 am »

I was just asked to look into the possiblity of importing EA diagrams into Visio. Have you found any way to create a Visio diagram from an EA diagram?

Thanks in advance for any help.

Tom

8

Automation Interface, Add-Ins and Tools / Re: Deployment Question

« on: March 23, 2010, 11:48:32 pm »

I was able to get this working. I'm not sure what the root cause of the issue was, but I was able to get the DLL registered and recognized by EA on Vista 64 bit. I did compile the DLL as a 32 bit DLL and also strong named the assembly.

I really appreciate all of your help and I'm sure it was just my lack of experience that was the problem. Thanks again for your replies and sharing your experience with me.  

9

Automation Interface, Add-Ins and Tools / Re: Deployment Question

« on: March 23, 2010, 05:54:43 am »

I have made a DLL, but I am having an issue deploying it to a Windows Vista 64 bit machine. The registry entry was added with the appropriate value for the entry point and I was able to register the assembly successfully with REGASM.

Within EA AddIn manager, it says that there is an error. Anyone had issues deploying to Vista 64 bit?

Thanks,

10

Automation Interface, Add-Ins and Tools / Deployment Question

« on: March 19, 2010, 07:23:13 am »

I hope this is not a dumb question, but all of the topics I have found explain how to deploy an AddIn as a DLL. I created a VS2008 solution that included the CS_AddInFramework project which I downloaded and 1 additional project that I developed. The solution builds as an EXE as opposed to a DLL.

Is there a way to deploy this solution to another machine that has EA? I added the registry entry, copied the files to the EA directory and registered the EXE using [full path to EXE] /REGSERVER. EA does not recognize the AddIn.

Do I need to redo the project as a DLL as opposed to an EXE? I do have a couple of WinForms in my solution if that makes a difference.

Thanks for any help.

11

Automation Interface, Add-Ins and Tools / Re: Automating Diagram Commands

« on: March 12, 2010, 02:24:18 am »

Geert,

1) This worked great. Thanks.

2) There is a StyleEx and an ExtendedStyleEx property for the diagram, but they are both empty string after the diagram is created. I found a general Diagram option "Disable fully scoped object names" that I turned off, but this is a system wide option.

3) Thanks for pointing me to the Project Interface. I was able to use the LayoutDiagramEx method and this will give us a good start to formatting the diagram.

Thanks again for all of your help.

Tom

12

Automation Interface, Add-Ins and Tools / Automating Diagram Commands

« on: March 11, 2010, 05:58:59 am »

I am creating new diagrams through the automation interface. I have a couple of questions:

1) Is there a way to Open the Diagram once it is created through the automation interface?

2) Is there a way to set properties that are not specified in the Help such as the Diagram Property "Show Namespace"?

3) Is there a way to automate the Layout of the Diagram through the automation interface?

Thanks for any help you may be able to provide.

13

Automation Interface, Add-Ins and Tools / Re: Hide Connector in Diagram

« on: February 24, 2010, 06:15:03 am »

Geert,

Thanks for your reply. That worked great. I appreciate your help.

Tom

14

Automation Interface, Add-Ins and Tools / Hide Connector in Diagram

« on: February 23, 2010, 09:20:44 am »

Hi. I am trying to hide connectors that I have created through the automation interface in appropriate diagrams. It seems that when the connectors are created within the model following the Add Connector example, they are not added to any diagrams at that point.

When I iterate through the DiagramLinks collection, the connectors that I created are not there. However, when I open the diagram, the connectros are there and visible.

I would like to automate hiding the Connectors I added, but cannot find a way to do this through the automation interface.

Thanks for any help.
Tom