Skip to main content

Attack Tree Builder

v1.0.0

Visual attack-tree builder — root goal, AND / OR nodes, leaf attacker actions, cost annotations.

Attack Tree (Mermaid)
graph TD
  gain_unauthorized_admin_access["🎯 Gain unauthorized admin access"]
  gain_unauthorized_admin_access --> path_0["Steal admin credentials"]
  gain_unauthorized_admin_access --> path_1["Exploit SQL injection"]
  gain_unauthorized_admin_access --> path_2["Brute force password"]
  gain_unauthorized_admin_access --> path_3["Phishing admin user"]


# Threat modeling notes:
1. **Steal admin credentials**
   - Likelihood: TBD (High/Medium/Low)
   - Impact: TBD
   - Mitigation: TBD
2. **Exploit SQL injection**
   - Likelihood: TBD (High/Medium/Low)
   - Impact: TBD
   - Mitigation: TBD
3. **Brute force password**
   - Likelihood: TBD (High/Medium/Low)
   - Impact: TBD
   - Mitigation: TBD
4. **Phishing admin user**
   - Likelihood: TBD (High/Medium/Low)
   - Impact: TBD
   - Mitigation: TBD

# Use with: STRIDE | PASTA | DREAD frameworks
# Render with: Mermaid Live Editor (mermaid.live)