Asset Attack Vectors: Building Effective Vulnerability Management Strategies to Protect Organizations

© Morey J. Haber, Brad Hibbert 2018

Morey J. Haber and Brad HibbertAsset Attack Vectorshttps://doi.org/10.1007/978-1-4842-3627-7_1

1. The Attack Chain

Morey J. Haber¹  and Brad Hibbert²

(1)

Heathrow, Florida, USA

(2)

Carp, Ontario, Canada

 

As highlighted in many articles, breach reports, and studies, most cyber-attacks originate from outside the organization. The Verizon Data Breach Investigations Report (DBIR) for 2018 calculates this at 73%. While the specific tactics may vary, the stages of an external attack follow a predictable flow. This is illustrated in Figure 1-1.

Figure 1-1

Cyber security attack chain

First, threat actors attack the perimeter ...