Knowing Your Attacker -A Guide to the Cyber Kill Chain

摘要

Today's attackers are becoming increasingly sophisticated, using advanced techniques to infiltrate a business's environment. Unlike in the past when hackers primarily worked alone using "smash-and-grab" techniques, today's attackers prefer to work in groups, with each member bringing his or her own expertise. With highly skilled players in place, these groups are able to approach infiltration in a much more regimented way, following a defined process that enables then to evade detection and achieve their ultimate goal: turning sensitive, valuable data into a profit. With attackers ready to pounce on any business at any moment, how can businesses stay ahead and ensure their sensitive data remains safe? Most attacks follow a 'process' that identified attackers' behaviours, ranging from researching, to launching an attack and ultimately to data exfiltration: this is articulated as the "Cyber Kill Chain".