Technical Attack Trees

A technical attack tree is an isolated subtree of an attack tree that may be used as a subtree in many attack trees.

A technical attack tree is just like an attack tree, except that its root node does not represent a threat itself, but some lower level action.

It makes sense to outsource a collection of (partial) attack paths to a technical attack tree when they are part of many attacks. Any attack tree, technical attack tree, or circumvent tree may reference technical attack trees.

Note
Technical attack trees are included as references, and hence they cannot be edited within the including tree. Furthermore, technical attack trees exist only for convenience, their use is not required.