Attack Frameworks

Question 1

Mitre ATT&CK

Answer 1

alternative to Lifecyle analysis by a Kill Chain Mitre uses Tactics, Tecniques and Processes. Used by cyber adversaries. Not structured

Question 2

Cyber Kill Chain

Answer 2

focuses on steps of cyber attack more of a lifecycle analysis

Does not consider retreat - one direction work flow

Question 3

Diamond Model

Answer 3

explores the relationship among four core features adversary, capability, infrastructure and victim

Question 4

Open Source Security Testing Methodology Manual

Answer 4

Provides a structured approach to security testing across different areas such as applications, networks and system.