How to Insert a Component and Split Data Flow Lines in Your Diagram

Introduction

To create an effective threat model, it's essential to accurately represent data flows and components within your system. Sometimes, you may find the need to insert a new component into an existing diagram. In this article, we will guide you through the steps to split data flow lines when adding a new component. This process will help you update your threat models more effectively, without the hassle of extensive data flow editing.

Example Use Case

1. Enhancing Data Security: You have completed your threat model but want to improve the security of your system by adding an additional component like a firewall between two already linked components, such as a database and a web application.

Steps to Split Data Flow Lines When Inserting a Component

1. Log into IriusRisk:

   • Open your web browser and navigate to the IriusRisk login page then login.

2. Go to Your List of Projects:

   • After logging in, click on the 'Projects' tab located in the top navigation bar.
   • From the drop-down menu, select 'View All Projects.'

3. Open the Project You Wish to Modify and Go to the Diagram Tab:

   • Locate the project you want to work on from the list of projects and open it.
   • Inside the project, navigate to the 'Diagram' tab to access the threat modeling diagram.

4. Select the New Component You Wish to Add from the Component Panel on the Left:

   • On the left side of your screen, you will find the component panel.
   • Browse or search for the component you want to insert into the data flow.

5. Drag the New Component onto the Data Flow Line Between the Two Pre-existing Components:

   • Click and hold the component you want to add.
   • Drag the component to the data flow line between the two pre-existing components where you want to insert it.

6. Wait for the Data Flow Line to Turn Dark Blue, Then Drop the Component:

   • As you hover the component over the data flow line, pay attention to the color of the line.
   • When the line turns dark blue, it indicates that you can release the mouse button to drop the component.

Conclusion

Adding an extra layer of security or optimizing your threat model by inserting components into data flow lines is a straightforward process in IriusRisk. By following these steps, you can efficiently enhance the accuracy and depth of your threat models without the need for extensive data flow editing. This capability not only saves you time but also ensures that your threat models reflect the most up-to-date security considerations in your system.