v1.1.2a

This is the current released version of Trike. It adds per-action risks and threat ranking by exposure, attack tree editing, and export to an XML file format. Also, there's been a lot of UI and engine polish work done; this release should be significantly more bug free and easier to use.

v1 build 5 (aka 1.1.1a)

This is the version of Trike we used at our ToorCon 2005 talk. It implements the v1 methodology as far as the threat attack stubs, i.e. it includes intended actions and threat generation plus the beginnings of attack graphs. You cannot edit the attack graphs, or export or import anything. This version also contains sample data for a Blog application.

You can get current development versions of Trike off of Squeek Source at http://www.squeaksource.com/Trike.html.

Please report bugs!

A Trike version number has 4 parts:

• a methodology version number, indicating which version of the Trike methodology this version of the tool implements
• a major tool version number; changes in this number indicate changes in the native file format such that older versions of the tool will not be able to read the default file format written by this tool
• a minor tool version number; changes in this number indicate bug fixes or other changes which do not impact the native file format
• possibly, a letter indicating quality:
  • a - alpha
  • b - beta
  • no letter - production release

For example, our next planned release will be named 1.2.0a: methodology version 1, tool version 2.0, approximately alpha quality.

Exceptions: Unfortunately, we numbered a few versions of Trike before deciding on a version numbering scheme. In chronological order,

• Very early versions 1a-1c and 1aa were released only to our pre-alpha testers, and will not receive real version numbers.
• Version 1.1.0a should have been released to the public at ShmooCon 2005, but was so buggy it never saw the light of day.
• Version 1b5 (a.k.a. 1 build 5) was released to the public at ToorCon 2005, and should have been numbered 1.1.1a.