Asset Attack Vectors: Building Effective Vulnerability Management Strategies to Protect Organizations

© Morey J. Haber, Brad Hibbert 2018

Morey J. Haber and Brad HibbertAsset Attack Vectorshttps://doi.org/10.1007/978-1-4842-3627-7_3

3. Threat Intelligence

Morey J. Haber¹  and Brad Hibbert²

(1)

Heathrow, Florida, USA

(2)

Carp, Ontario, Canada

 

Whenever an organization performs a risk assessment, they try to consider multiple variables based on the user, asset, criticality, location, and many technical criteria like hardening, exploits, vulnerabilities, risk surface, exposure, and maintenance. A complete risk assessment model is a daunting task to manually complete if you consider all the possible vectors and methodologies to actually quantify the risk.

In general, risk assessments start with a simple model (as shown in Figure 3-1) and each vector gets ...