SecurITree's attack tree threat models enable analysts to make risk-based security decisions regarding a system's threats.

Attack tree-based threat modeling software: Predicts enemy's behaviour, identifies unacceptable risks, validates effectiveness of controls, facilitates communication, holistic approach, demonstrates due diligence.
Defense & Intelligence: The nature of defense and intellegence applications makes it difficult to provide detailed comments as to how SecurITree is used in these environments. Multiple defense contractors use SecurITree, particularly for anti-tamper analysis. It has also been licensed by several intelligence agencies in more than one Allied nation.
Supply Chain Risks: SecurITree's holistic view of security allows it to consider a broad range of threats and risks. Using SecurITree, analysts construct models showing how supply chain attacks could compromise their products. This is true in many fields, but especially relevant for software developers and software users.
Anti-Tamper: SecurITree is the choice of major defense/aerospace contractors for analysing military avionics and weapon sustems circuitry. In the commercial realm, SecurITree is used to ensure the tamper resistance of satellite TV decoders and credit/debit card payment point of sale (POS) payment systems.
IT Security: SecurITree's attack tree-based analytic approach makes it easy to identify the highes security risks to information systems. Analysts can compare the benefits of proposed controls and countermeasures - before the are implemented. SecurITree's attack tree models provide evidence that due diligence has been performed.
Physical Security: Modern facility security is a combination of both physical barriers and electronic surveillance and access systems. SecurITree's attack tree models view both types of controls in one holistic fashion. SecurITree has been used to study a divers range of facilities, including those storing explosive and noxious gases.
Safe Nuclear Power: SecurITree is used to analyse the security of nuclear control systems in three counties. In the USA, section C.3.3 of the NRC Regulatory Guide 5.71 specifies that attack tree analysis must be used to validate the efficacy of alternate controls for the protection of Critical Digital Assets (CDAs). SecurITree makes this much easier!
Pipeline Protection: Oil and gas pipelines are vulnerable to both phsical and SCADA control system attacks. But which is the higher risk? What controls could possibly be effective against such an exposed asset? SecurITree's attack tree analysis system makes it possible to answer these vexing questions.
Refineries & Plants: These facilities are believed to be attractive targets of terrorist and other anarchist groups. SecurITree's attack tree analysis system analyzes possible attacks against these assets in the context of the adversary's goals and resources. It predicts how attacks will occur and helps identify effective defenses.
Power Grid Security: No type of infrastructure is more critical than the electric power grid. SecurITree is currently used by a major electrical regulator to quantify the risks to the bulk power grid. National laboratories also depend on SecurITree to help them create the protection stategies required to maintain our way of life.

 

SecurITree - the world's most advanced software for Attack Tree analysis!

 

Think like an attacker! Think SecurITree!