(attack or threat trees) actually form patterns patterns that can then be standar th dizat ced as reusable attack patterns (or, in Microsoft parlance, “threat tree patterns”) that
are easily comprehensible by non-security-expert developers. This patternbased approach is rapidly supplanting use of attack and threat trees and graphs
as a preferred threat modeling approach in many development organizations.
See Section 3.2.3.1 for a discussion of the ways in which attack patterns can and