https://www.advent-im.co.uk/attack-trees-part-two-riskmethodology/