Intelligent threat modeling and visualization

A computer-implemented system for visualizing and analyzing security threats in a suite of software applications, the system comprising:

• a visualization module for rendering, on a computer display, a map with components representative of the suite of software applications and relationships among the software applications, wherein the components are displayed in a base layer of the map;
• a data flow module configured to simulate a data flow through one or more of the suite of software applications, the data flow module adapted to interact with the visualization module to graphically illustrate on the computer display the simulated data flow through one or more of the components of the map that are representative of the one or more software applications;
• a threat modeling module configured to automatically identify one or more security threats in the suite of software applications, the one or more security threats including at least one simulated security threat captured by the simulated data flow, the threat modeling module adapted to interact with the visualization module to graphically depict on the computer display the one or more security threats on the map in a threat modeling layer;
• an anomaly detection module configured to predict an impact on at least one of the base layer or the threat modeling layer caused by the simulated security threat;
• a security controls module configured to implement software-based security controls for mitigating the one or more security threats identified by the threat modeling module;
• and
• a threat update module configured to determine a current state of the one or more security threats, the threat update module adapted to interact with the visualization module to graphically display the current state of security on the map in a threat update layer.