.png){kind=icon}
返回
Under false flag: using technical artifacts for cyber attack attribution
.png){kind=icon}
OA
AI
DOI：10.1186/s42400-020-00048-4.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
The attribution of cyber attacks is often neglected. The consensus still is that little can be done to prosecute the perpetrators - and unfortunately, this might be right in many cases. What is however only of limited interest for the private industry is in the center of interest for nation states. Investigating if an attack was carried out in the name of a nation state is a crucial task for secret services. Many methods, tools and processes exist for network- and computer forensics that allow the collection of traces and evidences. They are the basis to associate adversarial actions to threat actors. However, a serious problem which has not got the appropriate attention from research yet, are false flag campaigns, cyber attacks which apply covert tactics to deceive or misguide attribution attempts - either to hide traces or to blame others. In this paper we provide an overview of prominent attack techniques along the cyber kill chain. We investigate traces left by attack techniques and which questions in course of the attribution process are answered by investigating these traces. Eventually, we assess how easily traces can be spoofed and rate their relevancy with respect to identifying false flag campaigns.
Keyword:
Actor attribution
Advanced persistent threats
Technical indicators
False flag campaigns
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
C
IF:
3.7
论文数:
585
被引数:
1.0K
机构
暂无机构信息
引用论文
Immuno-Ultrastructural Localization and Putative Multiplication Sites of Huanglongbing Bacterium in Asian Citrus Psyllid Diaphorina citri.png)
InsectsOAAI
InsectsIF0
OAAI分享收藏Revisiting Hypogammaglobulinemia in Chronic Lymphocytic Leukemia: A Combined Clinicobiological ApproachBlood
BloodIF0
PREAI
分享收藏
查看更多内容