As information systems become increasingly complex, keeping intruders out becomes ever more difficult. Who could be potential attackers? What tactics might they use? And which security measures will prove most effective? In order to design a systematic and effective solution, a consortium of European researchers, coordinated by the University of Twente, worked together to create the Attack Navigator. This method is the major result of the European TREsPASS project.