# A Survey of Automatic Generation of Attack Trees and Attack Graphs

## TL;DR

This survey reviews current methods for automatically generating graphical security models like Attack Trees and Attack Graphs, highlighting methodologies, challenges, and future research directions.

## Contribution

It provides a comprehensive comparison of existing automatic generation techniques for security models and discusses key challenges and future research directions.

## Key findings

- Various methodologies are used for automatic generation of attack models.
- Current approaches face challenges like scalability and accuracy.
- Future research should focus on improving automation and model comprehensiveness.

## Abstract

Graphical security models constitute a well-known, user-friendly way to represent the security of a system. These kinds of models are used by security experts to identify vulnerabilities and assess the security of a system. The manual construction of these models can be tedious, especially for large enterprises. Consequently, the research community is trying to address this issue by proposing methods for the automatic generation of such models. In this work, we present a survey illustrating the current status of the automatic generation of two kinds of graphical security models -Attack Trees and Attack Graphs. The goal of this survey is to present the current methodologies used in the field, compare them and present the challenges and future directions for the research community.