Question / Discussion: Modeling Mobile Applications with Threagile?

[niklasbo]

Hi guys,

I would like to use Threagile for modeling mobile applications on Android and iOS. I looked f.e. into the technology definition and found only "mobile-app" as helpful entry.

threagile/pkg/types/technology.go

Line 43 in c9dd546

MobileApp = "mobile-app"

Maybe I missed something but I think, I would need some more components (technologies) to get productive, for example:

• Android / iOS app sandbox
• something for the public device storage
• Intents
• Keychain
• Keychain entries
• trusted on device environments like the SecureEnclave or TEE.

So my question is, has someone experience with modeling mobile application threats with Threagile? Can you share an example?

Thanks for your reply!