Glossary

Attack tree

A diagram with an attacker’s goal at the root and the ways to reach it as branches joined by AND and OR nodes, described by Bruce Schneier in 1999. It helps compare attack paths by cost or likelihood and shows which control cuts the most branches.

Defined in: Bruce Schneier, Attack Trees (Dr. Dobb’s Journal, December 1999)

Covered in

Guide

Choose a threat modeling method and turn its findings into tests

Use the four-question frame to scope a design, pick STRIDE, attack trees, LINDDUN or PASTA by the question you need answered, and leave behind threat records and abuse-case tests the team can run.