Skip to content
SPECIFICTION
Get listed

ADTool

satoss.uni.lu

Visit satoss.uni.lu
Spec score 7.3 #19 of 23 in Threat Modeling Software

What it is

ADTool is free software for modeling and analyzing attack-defense scenarios. It uses attack-defense trees, attack-defense terms, and sequential attack trees, following a methodology developed through the ATREES, TREsPASS, and ADT2P projects. Users can create and edit trees, then perform quantitative bottom-up analysis. A modular display is intended for large real-life scenarios. The tool can rank possible attacks for selected attribute domains, supporting attack-path analysis and risk prioritization. Models can be saved, printed, exported to several formats, and given customized layouts. The maker lists a new beta release and an earlier stable release. The new version requires JDK 7 or later. The stable package is offered as a dependency-included jar of about 6.6 MB or a light package of about 1100 kB. A previous-version manual and source code for both versions are available. The project is associated with the University of Luxembourg’s Security and Trust of Software Systems group.

Spec sheet

Purpose
ADTool models and analyzes attack-defense scenarios represented as attack-defense trees and attack-defense terms.Read 8 Oct 2026 · satoss.uni.lu
Headquarters
Esch-sur-Alzette, LuxembourgRead 28 Sep 2026 · satoss.uni.lu
Analysis
It supports quantitative bottom-up analysis of attack-defense scenarios.Read 8 Oct 2026 · satoss.uni.lu
Attack ranking
It can rank possible attacks for certain attribute domains.Read 8 Oct 2026 · satoss.uni.lu
Availability
The maker lists a new version in beta and a previous stable version, with downloadable JARs and source code.Read 8 Oct 2026 · satoss.uni.lu
Contact
The contact page lists Piotr Kordy at the University of Luxembourg in Esch-sur-Alzette, Luxembourg.Read 8 Oct 2026 · satoss.uni.lu
Contact location
The page gives the Security and Trust of Software Systems address as Belval Campus, Maison du Nombre, 6 avenue de la Fonte, L-4364 Esch-sur-Alzette, Luxembourg.Read 7 Oct 2026 · satoss.uni.lu
Documentation
A standalone user manual is available for download for the previous stable version.Read 7 Oct 2026 · satoss.uni.lu
Export and layout
It supports printing, exporting to various formats, saving models, and customizing layouts.Read 8 Oct 2026 · satoss.uni.lu
Large models
Its modular display supports modeling large real-life scenarios.Read 8 Oct 2026 · satoss.uni.lu
Large scenarios
Modular display allows users to model large real-life scenarios.Read 7 Oct 2026 · satoss.uni.lu
Methodology
The tool supports the attack-defense tree methodology developed within the ATREES, TREsPASS, and ADT2P projects.Read 7 Oct 2026 · satoss.uni.lu
Project methodology
The tool supports attack-defense tree methodology developed within the ATREES, TREsPASS, and ADT2P projects.Read 8 Oct 2026 · satoss.uni.lu
Research context
The maker describes attack trees as a systematic approach to security assessment and the project as extending them to include defenders and countermeasures.Read 8 Oct 2026 · satoss.uni.lu
Runtime requirement
The maker says the new version requires JDK 7 or later.Read 8 Oct 2026 · satoss.uni.lu
Source code
The maker page links source code for the new version on GitHub and offers source code for the previous version.Read 7 Oct 2026 · satoss.uni.lu
Source repository
The maker links the source code to the public tahti/ADTool2 GitHub repository.Read 8 Oct 2026 · satoss.uni.lu
Stable package sizes
The stable version is offered as a jar with dependencies included, around 6.6 MB, or a light version without dependencies, around 1100 kB.Read 7 Oct 2026 · satoss.uni.lu
Tree editing
It supports creating and editing attack-defense trees and sequential attack trees.Read 8 Oct 2026 · satoss.uni.lu

Strong points and limits

Strong points

  • Free plan is available
  • Supports attack-defense and sequential attack trees
  • Quantitative bottom-up scenario analysis
  • Modular display for large scenarios
  • Exports models and customizes layouts

Limits

  • New version is listed as beta
  • New version requires JDK 7 or later
  • No collaborative review support listed
  • Stable packages are separate download variants

Who it suits

ADTool suits security analysts and researchers who need attack-defense tree modeling, quantitative analysis, or attack ranking. It also fits users working with large scenarios and multiple modeling methods.

Verdict

ADTool covers tree creation, quantitative analysis, attack ranking, and model export in one free package. Its beta-versus-stable releases and JDK requirement should be checked before deployment.

Where Specifiction places it

Alternatives to ADToolAll alternatives →