Attack Trees

This is a free html only tool. No data is saved. If you want to save your attack trees, download images or analysis reports, and customize the countermeasures, sign up for a free account on hydropowersecurity.com for full access to the Attack Tree tool.

Watch this How-To video or see the steps below.

1. Click or drag items from the left menu onto the canvas: an Attacker Objective, one or more Attack Vectors, and Attacker Steps. Use the AND / OR gates to combine steps.

2. Type a description in each box. Connect items by dragging from the round dot on one item to another item. Click a line and press Delete to remove it.

3. Click a countermeasure on an Attacker Step to show that the step is mitigated.

4. Click Analyze to see which attack vectors are still vulnerable. A vector is mitigated when every path an attacker could take is blocked (OR: all branches blocked, AND: any one branch blocked).

Pan by dragging the background, zoom with the mouse wheel. Attack trees are never done: start simple and add detail over time.