Dynamic Attack Trees.

Safety-critical assets are facing enormous threats, and their continue existence lies in the ability to identify and mitigate these threats before they are realised. One good example of such assets is autonomous vehicles, a form of (application) AI that is equipped with self-awareness mechanisms that allow it to interact with a set of objects from the physical surrounding. However, this interaction can result in exposing the asset to a new set of undesired vulnerabilities that are difficult to identify. One of the traditional threat analysis methods used for threat modelling of different kinds of assets is attack trees, a well-known formalism used in security, safety, as well as risk analysis. In this paper, we propose an extension of attack trees, called dynamic attack trees . This allows us to model and analyse assets with dynamic threat environments that can interacts with external objects over time.