From 72ae7d2dd7785287b0b3b779f0d0330989ec02e6 Mon Sep 17 00:00:00 2001
From: Florian Hoss <mail@florianhoss.de>
Date: Thu, 23 Jun 2022 09:27:07 +0200
Subject: [PATCH] implement attack tree

---
 Lab05/documentation/main.tex        | 19 +++++++++++++++++++
 Lab05/documentation/part2/part2.tex | 29 +++++++++++++++++++++++++++++
 2 files changed, 48 insertions(+)

diff --git a/Lab05/documentation/main.tex b/Lab05/documentation/main.tex
index 282c21a..f0a99dd 100644
--- a/Lab05/documentation/main.tex
+++ b/Lab05/documentation/main.tex
@@ -16,6 +16,25 @@
 \usepackage[ngerman]{babel}
 \usepackage[T1]{fontenc}
 
+\usepackage{forest}
+\forestset{
+   angle below/.style={
+      tikz+={
+         \draw ($(!1.child anchor)!.35!(.parent anchor)$) [bend right=15] to ($(.parent anchor)!.65!(!l.child anchor)$);
+      }
+   },
+   color my roots/.style={
+      before typesetting nodes={
+        edge=#1,
+        for ancestors={
+          edge=#1,
+          #1,
+        },
+        #1,
+      }
+   },
+}
+
 \usepackage{pdfpages,graphicx,subcaption,lastpage}
 \graphicspath{ {./images} }
 
diff --git a/Lab05/documentation/part2/part2.tex b/Lab05/documentation/part2/part2.tex
index e5c170d..1efe7d6 100644
--- a/Lab05/documentation/part2/part2.tex
+++ b/Lab05/documentation/part2/part2.tex
@@ -1,2 +1,31 @@
 \section{Part 2: Attack Tree}
 
+\subsection{Baum}
+
+\begin{forest}
+    for tree={
+        draw,
+        minimum height=1cm,
+        anchor=parent,
+        align=center,
+        child anchor=parent
+    },
+    [{Order a Car at the online shop}, name=AD
+        [{Flood the System with Orders}
+            [{Use random\\IP Address}]
+            [{Pay with stolen\\bank accounts}]
+        ]
+        [{Use another users account}, angle below
+            [{Buy the car}]
+            [{Pay using\\users payment}]
+        ]
+        [{Attack the Payment system}, color my roots=red
+            [{SQL injection}]
+            [{DDOS Attack}, color my roots=red]
+        ]
+    ]
+\end{forest}
+
+\subsection{Kosten des günstigsten Angriffs}
+
+Um das Bezahlsystem zu überfluten kann man ein DDOSaS mieten und das Bezahlsystem angreifen.
\ No newline at end of file