Attack Graphs Plugin for Draw.io

Browser Version

Launch draw.io in your browser. No need for an installation.

Draw.io Desktop

For draw.io Desktop, you can obtain the latest version of the plugin from here:

Download attackgraphs.js

Open draw.io Desktop and load the plugin file using the Extras > Plugins... dialog.

Attention! Starting from v19.0.3, plugins in drawio-desktop are disabled (see #72 and drawio-desktop Release Notes).

You can either use a version of drawio-desktop before v19.0.3 or start drawio-desktop from the command line including the parameter --enable-plugins.

Templates

Attack Graph Templates

The browser version already provides graph templates for the analysis methods “RKL” and “TS 50701”. If you want to use the templates in the desktop version, you can download them, open them in draw.io and edit them as you like.

• RKL Attack Graph template
• TS 50701 Attack Graph template

Attributes and Functions Templates

If you want to use the attributes and functions of the analysis methods “RKL” and “TS 50701” in your graph, you can import them via Attack Graphs > Import Attributes and Functions.... Download the templates here:

• RKL attributes and functions template
• TS 50701 attributes and functions template

If you started from an Attack Graph template of the analysis method, there is no need to import attributes and functions as they were already contained in the graph template.

User Guide

• Default Attributes
• Aggregation Functions
• Computed Attributes
• Linking Attack Graphs
• Function Templates

Acknowledgements

This software is provided by INCYDE GmbH in collaboration with Systems Lab 21 GmbH as part of the project Prognose Securitybedarf und Bewertung möglicher Sicherheitskonzepte für das System Bahn, funded by the German Centre for Rail Traffic Research at the Federal Railway Authority.