Deciduous Save

App that simplifies building decision trees to model adverse scenarios

Project README

Deciduous

A web app that simplifies building decision trees to model adverse scenarios. Hosted at https://www.deciduous.app/

It allows you to document your assumptions about how a system, service, app, etc. will respond to adverse events. Its heritage is in helping defenders anticipate attacker behavior and prepare mitigations accordingly, but it also applies to anticipating reliability-related failures, too.

It is especially useful as a foundation to conduct resilience stress testing / chaos experimentation, allowing you to continually refine your mental models of a system with reality. The end goal of using decision trees is to document your beliefs about how failure will unfold across your system in a given scenario, which can inform design improvements to better sustain resilience to that failure.

Getting started guide: https://kellyshortridge.com/blog/posts/deciduous-attack-tree-app/

Theme options include:

  • theme: default - the default tree styling
  • theme: accessible - for more color differentiation between attack and mitigation nodes
  • theme: classic - classic Graphviz styling
  • theme: dark - dark mode

For a more detailed write-up of using decision trees in practice, refer to the book Security Chaos Engineering: Sustaining Resilience in Software and Systems.

Examples

Example trees for #inspo are hosted in /examples.

Security

Reliability

Surrealism

Open Source Agenda is not affiliated with "Deciduous" Project. README Source: rpetrich/deciduous
Stars
163
Open Issues
5
Last Commit
2 weeks ago
Repository
License

Open Source Agenda Badge

Open Source Agenda Rating