High Risk Scenarios

To attain the root (overall) goal in an attack tree, an adversary must perform one or more low level (leaf) operations. Each minimal set of leaf activities that will result in the root goal being achieved is known as an attack scenario or cut set. The risk associated with an attack scenario depends on its likelihood and impact on the victim. This figure shows the highest risk scenarios contained in the attack tree model of the hypothetical Acme corporation's web store.

High Risk Scenarios

Click to see other screenshots:

Acme Attack Tree
Acme Attack Scenarios
Pruned Attack Tree
Threat Agent Profile
Threat Agent Utility Function
Risk by Configuration and Threat
High Risk Scenarios
Hostile Risk Scatter Graph
Linux Attack Tree
Privileged Process Attack Tree

Home Close Window