SecurITree Saves Money
Some people have asked, "Can I really justify the price of a SecurITree license?" This is a fair question, given that a full function SecurITree license with Information Technology libraries costs about $10,000 USD. After all, you can buy a license for Visio or CorelDraw for a lot less than that.†
SecurITree saves you money in multiple ways. First of all, compared to a simple drawing tool, SecurITree can save an analyst a lot of time in analyzing attack tree models. SecurITree was designed from the ground up for attack tree modeling. The ability to prune trees based on capabilities and the automated generation of impact-ranked attack scenarios is unique to SecurITree. These functions can take hours to do by hand -- even for simple cases. Given the cost of security analysts, SecurITree could pay for itself in time savings in as little as one month!
However, time savings aren't the real story. SecurITree makes it fast and easy to compare multiple architectures and try "what-if" solutions. This leads to much better analysis which helps you make better security decisions. The solutions identified will be effective and cost-effective. SecurITree will help you focus on the architectural solutions which have a high Return On Investment (ROI). You will not waste money on technologies which are inappropriate for your situation. This could easily save ten times the cost of a SecurITree license based on the current cost of security products!
The big win comes when you are called upon to defend your choices. The people asking the questions often don't understand technical issues. They may have a hard time understanding the logic that your choices were based on. A properly done SecurITree project captures the assumptions that were made in the analysis about your system's vulnerabilities, the threats it faced and the impact that was anticipated. This information is quickly called upon and presented to the critics in an easy to understand graphical format -- even if the analyst who did the study is unavailable! Try matching that with a simple drawing tool! This could easily save hundreds of times the cost of a SecurITree license in a due diligence lawsuit!
†Don't get us wrong. We like Visio™ and CorelDraw™. We use them all the time - but not for attack tree analysis.