Attack tree
Conceptual diagrams showing how an asset, or target, might be attacked / From Wikipedia, the free encyclopedia
Dear Wikiwand AI, let's keep it short by simply answering these key questions:
Can you list the top facts and stats about Attack tree?
Summarize this article for a 10 year old
Attack trees are conceptual diagrams showing how an asset, or target, might be attacked.[1] Attack trees have been used in a variety of applications. In the field of information technology, they have been used to describe threats on computer systems and possible attacks to realize those threats. However, their use is not restricted to the analysis of conventional information systems. They are widely used in the fields of defense and aerospace for the analysis of threats against tamper resistant electronics systems (e.g., avionics on military aircraft).[2] Attack trees are increasingly being applied to computer control systems (especially relating to the electric power grid).[3] Attack trees have also been used to understand threats to physical systems.
This article needs additional citations for verification. (April 2012) |
Some of the earliest descriptions of attack trees are found in papers and articles by Bruce Schneier,[4] when he was CTO of Counterpane Internet Security. Schneier was clearly involved in the development of attack tree concepts and was instrumental in publicizing them. However, the attributions in some of the early publicly available papers on attack trees[5] also suggest the involvement of the National Security Agency in the initial development.
Attack trees are very similar, if not identical, to threat trees. Threat trees were developed by Jonathan Weiss of Bell Laboratories to comply with guidance in MIL STD 1785[6] for AT&T's work on Command and Control for federal applications, and were first described in his paper in 1982.[7] This work was later discussed in 1994 by Edward Amoroso.[8]