Real-World Attack Trees

Several published attack trees provide valuable reference material.

Fraud Attack Tree

Fraud attack tree created by the Association of Certified Fraud Examiners

Election Threat Trees

Election attack tree created by the Elections Assitance Commission

SSL Mind Map

SSL threat model by Ivan Ristic

Observations

  • Flexible but less structured
  • Harder to navigate visually
  • Inconsistent categorisation
Backward Example Attack Tree Limitations and Perspective Forward