SPTool – equivalence checker for SAND attack trees

Abstract

A SAND attack tree is a graphical model decomposing an attack scenario into basic actions to be executed by the attacker. SAND attack trees extend classical attack trees by including the sequential conjunctive operator (SAND) to the formalism. They thus allow to differentiate actions that need to be executed sequentially from those that can be performed in parallel. Since several structurally different SAND attack trees can represent the same attack scenario, it is important to be able to decide which SAND attack trees are equivalent. SPTool is free, open source software for checking equivalence of SAND attack trees and computing their canonical forms. It relies on term rewriting techniques and an equational theory axiomatizing SAND attack trees.