Markus Heinrich presents "Software-supported threat analysis by attack graphs" at the Scientific Railway Signalling Symposium in Darmstadt.
The implementation enables a visual risk assessment using the open source draw.io tool. The attackgraph plugin is available under MIT license.