AXIOM THREAT DESK · ATTACK TREE SIMULATOR
Attack Tree Decision Simulator & Choke-Point Analysis
Evaluates multi-stage adversary paths by attacker cost and time-to-compromise, identifying single architectural choke-points that prune entire exploit trees.
PATH-01
Choke-Point Identified · $200 / 45mExfiltrate Customer_PII_DB Records
Public Portal -> API Gateway (BOLA / SQLi) -> Direct TCP 5432 -> Dump PostgreSQL
Recommended Choke-Point: Enforce Prepared Statements (T-1) + Envoy mTLS Sidecar on PostgresSimulate in Attack Chain
PATH-02
Mitigated · $450 / 2.0hForge Admin OIDC Session Token
Phishing / Credential Stuffing -> Auth Service Weak Secret -> Role Escalation (E-1)
Recommended Choke-Point: Pin RS256 JWKS Hardware Key + Enforce FIDO2 MFA (S-1)Simulate in Attack Chain
PATH-03
Choke-Point Identified · $600 / 3.5hTamper with CloudTrail Audit Logs
Compromised CI Runner -> Assume Admin Role -> Modify S3 Audit Bucket (R-1)
Recommended Choke-Point: Enable S3 Object Lock (WORM Compliance Mode) + Separate KMS KeySimulate in Attack Chain