Attack Trees vs. Fault Trees: Two Sides of the Same Coin from Different Currencies

This work compares formal approaches to define and operate with attack trees and fault trees. We start by investigating similarities between the syntactic structure, semantics, and qualitative analysis, of static attack trees and fault trees. Then we point out differences of the analysis methods and metrics between the two formalisms, providing a deeper insight for their dynamic variants. Finally, we overview several extensions and categorise them using the new concept of dimension, which allows us to compare these extensions and point out research gaps.