a classic IT risk management framework consisting of Attacker, Asset,
Vulnerability, and Impact. Attack tree nodes are structured into five layers:
1. Stakeholder values, e.g., productivity, privacy, reputation
2. IT hosts that uphold stakeholder values