Chokepoints are an aggregation of all Critical Paths to attack steps with a consequence on them. A chokepoint is an asset where attacks (towards attack steps with a consequence on them) converge in the model.

The color of the chokepoint indicates how frequently it occurs in the critical paths. The width of the lines and the height of the chokepoint bars indicates how much risk the chokepoints contributes with times its frequency. The frequency denotes the total number of times an object occurs across all attack paths, or, in other words, how much an asset is expected to help the attacker.

You can click on chokepoints or high value assets to filter the critical path visualization.

What’s Next