rpetrich / deciduous

App that simplifies building decision trees to model adverse scenarios

Deciduous

A web app that simplifies building decision trees to model adverse scenarios. Hosted at https://www.deciduous.app/

It allows you to document your assumptions about how a system, service, app, etc. will respond to adverse events. Its heritage is in helping defenders anticipate attacker behavior and prepare mitigations accordingly, but it also applies to anticipating reliability-related failures, too.

It is especially useful as a foundation to conduct resilience stress testing / chaos experimentation, allowing you to continually refine your mental models of a system with reality. The end goal of using decision trees is to document your beliefs about how failure will unfold across your system in a given scenario, which can inform design improvements to better sustain resilience to that failure.

Getting started guide: https://kellyshortridge.com/blog/posts/deciduous-attack-tree-app/

Theme options include:

• theme: default - the default tree styling
• theme: accessible - for more color differentiation between attack and mitigation nodes
• theme: classic - classic Graphviz styling
• theme: dark - dark mode

For a more detailed write-up of using decision trees in practice, refer to the book Security Chaos Engineering: Sustaining Resilience in Software and Systems.

Examples

Example trees for #inspo are hosted in /examples.

Security

• S3 Bucket with Video Recordings
• Cryptominer in a Container (video explanation)

Reliability

• Missing Logs (video explanation)
• Unrealistic Traces

Surrealism

• Thanksploitation scenario from Rick and Morty (blog post)

deciduous's Issues

Use as VSCode extension

As a person who uses VSCode and wants to version the graph.

I wanted to be able to preview graph changes in a window and also use standard version control tools to diagram.

Rename Reality option

I am using Deciduous for some slightly different types of flowcharts than intended, so I understand if this request is not accepted, but I was wondering if there might be an option added allowing you to rename the "Reality" box at the very top of the screen to something more specific to the flow being diagrammed. In my case, I am using Deciduous to map out all of the security actions that our mail systems can take as a message flows through them, and it would be helpful if I could rename the top box to say "Incoming Email" or something similar.

[feature request] make it an obsidian.md plugin.

[feature request] make it an obsidian.md plugin.

That'd be so cool.

multi-line commenting

when building a decision tree, I want to comment out multiple lines at a time. This may be due to active discussions with collaborators where we aren't sure whether we want to include something, needing to download an image for a subset of branches, or wanting to show the difference between the tree with and without proposed mitigations.

Right now, commenting out must be performed line by line, which can be tedious with trees of a sufficient size.

link 404´d

The embedded link to the Security Chaos Engineering e-book 404´d.

The app raises an error when adding labels in non-Latin languages

When using non-Latin languages, the app raises the following error immediately:
"InvalidCharacterError: Failed to execute 'btoa' on 'Window': The string to be encoded contains characters outside of the Latin1 range."

Text selection is skewed from visible text in Chrome on Linux

The further down the page I go, the more the actual text selection for editing the text skews from the visible text. This makes it difficult to edit the bottom of the text. See the example video
Example video: https://github.com/throwaway-a/examplevideo

save YAML

when I've finished a draft decision tree, I want to save the YAML I've created, not just the DOT file. Ideally, I'd like to export the YAML into a gist or otherwise version it in GitHub

Feature request: PNG export

I can convert from SVG to PNG, but most places I want to display an attack tree in documentation, I'll want it in a PNG. Is that possible to add?

Direction flow option

As most attack trees flow from the attack / threat being at the top, it would be beneficial to provide an option to control which direction is used in the diagram. Top> bottom or bottom > top.

Autocomplete suggestions in text editor

As a threat modeler, I want to have suggestions provided for nodes as I type that match the text so that I can quickly select and reference other graph nodes without having to find the exact string name by scrolling up and down.

Malformed line comment results in [object Object]

See https://www.deciduous.app/#gist=1b1460a8d3d9babf3092c5cf8040324c

Relevant yaml:

- goal3:
  from:
  - attack1:
      implemented: true  # <-- 2 spaces too many

Publish a schema definition

I'd like to be able to programmatically generate threat models in a deciduous.app compatible format.

Fix legend: true causing memory corruption inside graphviz's webassembly sandbox

          Try this, I tried it in Chrome, Vivaldi and Firefox, in private mode and normal mode. also tried clearing cache.

First, paste the below example. It should look like this:

Once pasted, put a new line under the title: entry. As you start to type legend: true, you will see the odd characters once you complete the word true.

title: Test attack tree

facts:
- t_a: Type A
  from:
  - reality
- t_b: Type B
  from:
  - reality
- t_c: Type C
  from:
  - reality
- t_d: Type D
  from:
  - reality
- t_e: Type E
  from:
  - reality

attacks:
- attack_1: Attack number 1
  from:
  - t_a
- attack_2: Attack number 2
  from:
  - t_a
- attack_3: Attack number 3
  from:
  - t_a
- attack_4: Attack number 4
  from:
  - t_b
- attack_5: Attack number 5
  from:
  - t_c
- attack_6: Attack number 6
  from:
  - t_d
- attack_7: Attack number 7
  from:
  - t_d
- attack_8: Attack number 8
  from:
  - t_d
- attack_9: Attack number 9
  from:
  - t_e

mitigations:
- mitigation: Mitigation?
  from:
  - attack_1
  - attack_2
  - attack_3
  - attack_4
  - attack_5
  - attack_6
  - attack_7
  - attack_8
  - attack_9

goals:
- goal_1: Goal number 1
  from:
  - attack_1
  - attack_2
  - attack_3
- goal_2: Goal number 2
  from:
  - attack_4
- goal_3: Goal number 3
  from:
  - attack_5
- goal_4: Goal number 4
  from:
  - attack_6
  - attack_7
  - attack_8
- goal_5: Goal number 5
  from:
  - attack_9

Originally posted by @huornlmj in #56 (comment)

Accessibility: color blind friendliness

I love the tool, but for folks who are red blind, the difference between attacks and mitigations can be difficult to tell the difference:

vs

I did a cursory web search, and entered the current color values to show how they render to different folks.

That site also has good recommendations for accessible pallets. You could also consider using different shapes/corners to differentiate nodes in the graph

Provide a legend option

It would be beneficial to have a legend option available. If the material is exported into SVG or PDF with no legend, clarity is lost to the audience if they do not know what the node colour codes mean.