A standard part of threat modelling for any particular system is to identify what might motivate an attack on that system, and who might be motivated to breach it. The level and detail of precautions will vary depending on the system to be secured. A home personal computer, bank, and classified military network face very different threats, even when the underlying technologies in use are similar.
lundi 16 janvier 2017
Attacker motivation
As with physical security,
the motivations for breaches of computer security vary between attackers. Some
are thrill-seekers or vandals, others are activists or criminals looking for
financial gain. State-sponsored attackers are now common and well resourced,
but started with amateurs such as Markus Hess who hacked for the KGB, as
recounted by Clifford Stoll, in The Cuckoo's Egg.
A standard part of threat modelling for any particular system is to identify what might motivate an attack on that system, and who might be motivated to breach it. The level and detail of precautions will vary depending on the system to be secured. A home personal computer, bank, and classified military network face very different threats, even when the underlying technologies in use are similar.
A standard part of threat modelling for any particular system is to identify what might motivate an attack on that system, and who might be motivated to breach it. The level and detail of precautions will vary depending on the system to be secured. A home personal computer, bank, and classified military network face very different threats, even when the underlying technologies in use are similar.
0 commentaires:
Enregistrer un commentaire