Fault tree analysis for security (sometimes referred to as threat tree or
attack tree analysis) is a top-down approach to identifying vulnerabilities. In a
fault tree, the attacker’s goal is placed at the top of the tree. Then, the analyst
documents possible alternatives for achieving that attacker goal. For each