Attack trees are graphical representations of a system’s vulnerabilities. Attack trees can be used as a component of threat modeling.