{"format":"epicdraw-workspace","version":1,"charts":[{"id":"template-attack-tree-diagram","name":"Attack tree diagram","paper":"white","pattern":"blank","wobble":0.22,"ppm":48,"nodes":[{"id":"attack-tree-diagram-n1","type":"lane","text":"","x":0,"y":0,"w":1720,"h":1000,"fill":"none","fst":"solid","seed":701,"font":"sans","fs":22,"bold":false,"lv":0,"lock":true,"z":-20,"ink":"navy"},{"id":"attack-tree-diagram-n2","type":"text","text":"Attack tree diagram","x":42,"y":24,"w":1620,"h":64,"fill":"none","fst":"solid","seed":702,"font":"hand","fs":48,"bold":true,"lv":0,"align":"left","ink":"navy"},{"id":"attack-tree-diagram-n3","type":"text","text":"Break an attacker's goal into the paths that reach it, using AND and OR gates, and mark the control that blocks each leaf.","x":42,"y":96,"w":1620,"h":44,"fill":"none","fst":"solid","seed":703,"font":"sans","fs":23,"bold":false,"lv":0,"align":"left","ink":"grey"},{"id":"attack-tree-diagram-n4","type":"line","text":"","x":42,"y":160,"w":1636,"h":4,"fill":"none","fst":"solid","seed":704,"font":"sans","fs":22,"bold":false,"lv":0,"rot":0,"head":"none","ink":"navy"},{"id":"attack-tree-diagram-n5","type":"text","text":"EXAMPLE TEMPLATE · Replace the example content, owners and dates with your own.","x":42,"y":952,"w":1630,"h":30,"fill":"none","fst":"solid","seed":705,"font":"sans","fs":18,"bold":false,"lv":0,"align":"left","ink":"grey"},{"id":"attack-tree-diagram-n6","type":"round","text":"Goal: access the\ncustomer database","x":690,"y":215,"w":340,"h":80,"fill":"rose","fst":"solid","seed":706,"font":"sans","fs":19,"bold":true,"lv":0},{"id":"attack-tree-diagram-n7","type":"ellipse","text":"OR","x":820,"y":330,"w":80,"h":44,"fill":"white","fst":"solid","seed":707,"font":"sans","fs":15,"bold":true,"lv":0},{"id":"attack-tree-diagram-n9","type":"round","text":"Steal admin\ncredentials","x":120,"y":410,"w":340,"h":80,"fill":"peach","fst":"solid","seed":709,"font":"sans","fs":18,"bold":true,"lv":0},{"id":"attack-tree-diagram-n11","type":"round","text":"Exploit the\nweb app","x":690,"y":410,"w":340,"h":80,"fill":"peach","fst":"solid","seed":711,"font":"sans","fs":18,"bold":true,"lv":0},{"id":"attack-tree-diagram-n13","type":"round","text":"Insider\ncopies data","x":1260,"y":410,"w":340,"h":80,"fill":"peach","fst":"solid","seed":713,"font":"sans","fs":18,"bold":true,"lv":0},{"id":"attack-tree-diagram-n15","type":"ellipse","text":"AND","x":250,"y":525,"w":80,"h":44,"fill":"white","fst":"solid","seed":715,"font":"sans","fs":15,"bold":true,"lv":0},{"id":"attack-tree-diagram-n17","type":"ellipse","text":"OR","x":820,"y":525,"w":80,"h":44,"fill":"white","fst":"solid","seed":717,"font":"sans","fs":15,"bold":true,"lv":0},{"id":"attack-tree-diagram-n19","type":"ellipse","text":"AND","x":1390,"y":525,"w":80,"h":44,"fill":"white","fst":"solid","seed":719,"font":"sans","fs":15,"bold":true,"lv":0},{"id":"attack-tree-diagram-n21","type":"round","text":"Phishing email\nworks","x":45,"y":640,"w":240,"h":80,"fill":"sun","fst":"solid","seed":721,"font":"sans","fs":17,"bold":true,"lv":0},{"id":"attack-tree-diagram-n23","type":"text","text":"Medium · phishing training","x":45,"y":730,"w":240,"h":56,"fill":"none","fst":"solid","seed":723,"font":"sans","fs":16,"bold":false,"lv":0,"align":"center","ink":"grey"},{"id":"attack-tree-diagram-n24","type":"round","text":"MFA not\nenforced","x":310,"y":640,"w":240,"h":80,"fill":"sun","fst":"solid","seed":724,"font":"sans","fs":17,"bold":true,"lv":0},{"id":"attack-tree-diagram-n26","type":"text","text":"Low · MFA everywhere","x":310,"y":730,"w":240,"h":56,"fill":"none","fst":"solid","seed":726,"font":"sans","fs":16,"bold":false,"lv":0,"align":"center","ink":"grey"},{"id":"attack-tree-diagram-n27","type":"round","text":"SQL injection","x":600,"y":640,"w":240,"h":80,"fill":"sun","fst":"solid","seed":727,"font":"sans","fs":17,"bold":true,"lv":0},{"id":"attack-tree-diagram-n29","type":"text","text":"Low · parameterised queries","x":600,"y":730,"w":240,"h":56,"fill":"none","fst":"solid","seed":729,"font":"sans","fs":16,"bold":false,"lv":0,"align":"center","ink":"grey"},{"id":"attack-tree-diagram-n30","type":"round","text":"Unpatched\nframework","x":865,"y":640,"w":240,"h":80,"fill":"sun","fst":"solid","seed":730,"font":"sans","fs":17,"bold":true,"lv":0},{"id":"attack-tree-diagram-n32","type":"text","text":"Medium · patch SLA","x":865,"y":730,"w":240,"h":56,"fill":"none","fst":"solid","seed":732,"font":"sans","fs":16,"bold":false,"lv":0,"align":"center","ink":"grey"},{"id":"attack-tree-diagram-n33","type":"round","text":"Has broad\naccess","x":1150,"y":640,"w":240,"h":80,"fill":"sun","fst":"solid","seed":733,"font":"sans","fs":17,"bold":true,"lv":0},{"id":"attack-tree-diagram-n35","type":"text","text":"Medium · least privilege","x":1150,"y":730,"w":240,"h":56,"fill":"none","fst":"solid","seed":735,"font":"sans","fs":16,"bold":false,"lv":0,"align":"center","ink":"grey"},{"id":"attack-tree-diagram-n36","type":"round","text":"No data loss\nalerts","x":1415,"y":640,"w":240,"h":80,"fill":"sun","fst":"solid","seed":736,"font":"sans","fs":17,"bold":true,"lv":0},{"id":"attack-tree-diagram-n38","type":"text","text":"High · DLP alerts","x":1415,"y":730,"w":240,"h":56,"fill":"none","fst":"solid","seed":738,"font":"sans","fs":16,"bold":false,"lv":0,"align":"center","ink":"grey"},{"id":"attack-tree-diagram-n39","type":"text","text":"AND: every child must happen. OR: any one child is enough. Each leaf shows likelihood and the control that blocks it.","x":45,"y":860,"w":1630,"h":30,"fill":"none","fst":"solid","seed":739,"font":"sans","fs":17,"bold":false,"lv":0,"align":"left","ink":"grey"}],"edges":[{"id":"attack-tree-diagram-e8","from":"attack-tree-diagram-n6","to":"attack-tree-diagram-n7","label":"","seed":708,"style":"elbow","head":"none","lv":0,"font":"sans","fs":18,"sa":"b","ea":"t"},{"id":"attack-tree-diagram-e10","from":"attack-tree-diagram-n7","to":"attack-tree-diagram-n9","label":"","seed":710,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"b","ea":"t"},{"id":"attack-tree-diagram-e12","from":"attack-tree-diagram-n7","to":"attack-tree-diagram-n11","label":"","seed":712,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"b","ea":"t"},{"id":"attack-tree-diagram-e14","from":"attack-tree-diagram-n7","to":"attack-tree-diagram-n13","label":"","seed":714,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"b","ea":"t"},{"id":"attack-tree-diagram-e16","from":"attack-tree-diagram-n9","to":"attack-tree-diagram-n15","label":"","seed":716,"style":"elbow","head":"none","lv":0,"font":"sans","fs":18,"sa":"b","ea":"t"},{"id":"attack-tree-diagram-e18","from":"attack-tree-diagram-n11","to":"attack-tree-diagram-n17","label":"","seed":718,"style":"elbow","head":"none","lv":0,"font":"sans","fs":18,"sa":"b","ea":"t"},{"id":"attack-tree-diagram-e20","from":"attack-tree-diagram-n13","to":"attack-tree-diagram-n19","label":"","seed":720,"style":"elbow","head":"none","lv":0,"font":"sans","fs":18,"sa":"b","ea":"t"},{"id":"attack-tree-diagram-e22","from":"attack-tree-diagram-n15","to":"attack-tree-diagram-n21","label":"","seed":722,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"b","ea":"t"},{"id":"attack-tree-diagram-e25","from":"attack-tree-diagram-n15","to":"attack-tree-diagram-n24","label":"","seed":725,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"b","ea":"t"},{"id":"attack-tree-diagram-e28","from":"attack-tree-diagram-n17","to":"attack-tree-diagram-n27","label":"","seed":728,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"b","ea":"t"},{"id":"attack-tree-diagram-e31","from":"attack-tree-diagram-n17","to":"attack-tree-diagram-n30","label":"","seed":731,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"b","ea":"t"},{"id":"attack-tree-diagram-e34","from":"attack-tree-diagram-n19","to":"attack-tree-diagram-n33","label":"","seed":734,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"b","ea":"t"},{"id":"attack-tree-diagram-e37","from":"attack-tree-diagram-n19","to":"attack-tree-diagram-n36","label":"","seed":737,"style":"elbow","head":"end","lv":0,"font":"sans","fs":18,"sa":"b","ea":"t"}],"strokes":[],"imgs":{}}],"cur":"template-attack-tree-diagram"}