Cyber Adversary Characterization - Auditing the Hacker Mind

Cover

Acknowledgments

Author

Contributors

Special Contribution

Preface

Contents

Chapter 1 Introduction

Cyber Adversary Characterization

Cyber Terrorist: A Media Buzzword?

Failures of Existing Models

Introduction to Characterization Theory

Chapter 2 Theoretical Characterization Metrics

Introduction

The Adversary Object Matrix

Adversary Property Relationships

The Adversary Model—“Adversary Environment Properties”

The Adversary Model—“Attacker Properties”

Summary

Chapter 3 Disclosure and the Cyber Food Chain

Introduction

Vulnerability Disclosure and the Cyber Adversary

Disclosure Attack Capability and Considerations

The Vulnerability Disclosure Pyramid Metric

The Disclosure Food Chain

Summary

Chapter 4 Rating the Attack: Post-Incident Characterization Metrics

Introduction:Theoretical Crossover and the Attack Point Scoring Systems

The Source of the Problem

Variables of Attack Tools to Consider

Common Types of Attack Tools

Caveats of Attack Tool Metrics

Attack Technique Variables

Common Types of Attack Techniques

Caveats: Attack Behavior Masquerading

Summary

Chapter 5 Asset Threat Characterization

Introduction

Target Properties: Attack Driver and Inhibitor Influence

The Asset Threat Characterization

Fictional Asset Threat Characterization Case Study

Summary

Chapter 6 Bringing It All Together: Completing the Cyber Adversary Model

Introduction

Intermetric Component Relationships

Summary

Chapter 7 WarmTouch: Assessing the Insider Threat and Relationship Management

Introduction

The Challenges of Detecting the Insider Threat

Case Illustrations

Summary

References

Footnote

Chapter 8 Managing the Insider Threat

Introduction: Setting the Stage

Prevention

Detection

Insider Case Management

Summary

References

Chapter 9 The Cyber Adversary in Groups: Targeting Nations’ Critical Infrastructures

Introduction

Historical Context

Increasing Threats and Vulnerabilities

Identifying and Characterizing the Cyber Threat

Summary

Chapter 10 Characterizing the Extremes„Terrorists and Nation States

Introduction

The Nation State Cyber Adversary

International Terrorists and Rogue Nations

Physical Insider Placement

Summary

Footnotes and References

Chapter 11 Conclusions

A Look Back

Kevin D. Mitnick: Attack, Weighed and Measured!

Summary

And Now for Something a Little Different!

Chapter 12 Return on Investment

Playing the Market

Information Leakage at the Packet Level

Corrupted by Greed

Revenge of the Nerd

A Lead from Las Vegas

The Call of Opportunity

Initial Reconnaissance

Shrax:The Ultimate Rootkit

Throwaway Account

Seeking the Prize

Hacking .MIL

Triumph and New Toys

Endnotes

Aftermath…The Investigation Continues

Final Words

Acknowledgements

Glossary

Index