Abstract: The present work is part of the project RE(H)STRAIN1 which investigates security and its impact on the resilience of the Franco-German high-speed train network in case of terrorist attacks. To improve the capacity of this network to recover a normal functioning after a terrorist attack, appropriate security measures must be determined. To do so, the project investigates, in a scenario-driven holistic approach the entire terrorist sphere of possible actions. Terrorism threat is first defined as a set of single attacks called vignette attacks represented by the triplet actor – weapon – target, then complex attack scenarios are built considering combination rules detailed in this article. In this regard, this work aims at providing end-users with an approach to automatically deduce a set of formalized, consistent and plausible complex attack scenarios to allow in further steps to analyze and improve the resilience level of the high-speed train transportation infrastructure.