Comparing Attack Models for IT Systems: Lockheed Martin's Cyber Kill Chain, MITRE ATT&CK Framework and Diamond Model

Nitin Naik; Paul Jenkins; Paul Grace; Jingping Song

doi:10.1109/ISSE54508.2022.10005490

Comparing Attack Models for IT Systems: Lockheed Martin's Cyber Kill Chain, MITRE ATT&CK Framework and Diamond Model

Nitin Naik^*
, Paul Jenkins
, Paul Grace
, Jingping Song

^*Awdur cyfatebol y gwaith hwn

Ysgol Dechnolegau Caerdydd

Allbwn ymchwil: Pennod mewn Llyfr/Adroddiad/Trafodion Cynhadledd › Cyfraniad mewn cynhadledd › adolygiad gan gymheiriaid

33 Dyfyniadau (Scopus)

Crynodeb

Cyberattacks are a serious challenge for any IT system, which motivates cybersecurity professionals and developers to constantly explore various attack models to analyse the cyberattack lifecycle used by attackers to mount their attacks. Several attack models have been proposed and successfully utilised to analyse the various types of cyberattacks and their mitigations. All the models offer different characteristics, advantages and disadvantages. Therefore, it is important to examine the most popular attack models to understand their characteristics and suitability for modelling specific types of attacks. This paper will examine characteristics, advantages and disadvantages of the three most popular attack models: The Lockheed Martin's Cyber Kill Chain, the MITRE ATT&CK Framework and the Diamond Model. Finally, it will provide a comparative study of these three attack models to present a relative summary for selecting the most suitable attack model for a specific application.

Iaith wreiddiol	Saesneg
Teitl	ISSE 2022 - 2022 8th IEEE International Symposium on Systems Engineering, Conference Proceedings
Cyhoeddwr	Institute of Electrical and Electronics Engineers Inc.
ISBN (Electronig)	9781665481823
Dynodwyr Gwrthrych Digidol (DOIs)	https://doi.org/10.1109/ISSE54508.2022.10005490
Statws	Cyhoeddwyd - 10 Ion 2023
Digwyddiad	8th IEEE International Symposium on Systems Engineering, ISSE 2022 - Vienna, Awstria Hyd: 24 Hyd 2022 → 26 Hyd 2022

Cyfres gyhoeddiadau

Enw	ISSE 2022 - 2022 8th IEEE International Symposium on Systems Engineering, Conference Proceedings
Cyhoeddwr	IEEE
ISSN (Argraffiad)	2687-881X
ISSN (Electronig)	2687-8828

Cynhadledd

Cynhadledd	8th IEEE International Symposium on Systems Engineering, ISSE 2022
Gwlad/Tiriogaeth	Awstria
Dinas	Vienna
Cyfnod	24/10/22 → 26/10/22

Mynediad at Ddogfen

10.1109/ISSE54508.2022.10005490

Ffeiliau eraill a chysylltiadau

Dolen i’r cyhoeddiad yn Scopus

Dyfynnu hyn

Naik, N., Jenkins, P., Grace, P., & Song, J. (2023). Comparing Attack Models for IT Systems: Lockheed Martin's Cyber Kill Chain, MITRE ATT&CK Framework and Diamond Model. Yn ISSE 2022 - 2022 8th IEEE International Symposium on Systems Engineering, Conference Proceedings (ISSE 2022 - 2022 8th IEEE International Symposium on Systems Engineering, Conference Proceedings). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/ISSE54508.2022.10005490

Naik, Nitin ; Jenkins, Paul ; Grace, Paul et al. / Comparing Attack Models for IT Systems : Lockheed Martin's Cyber Kill Chain, MITRE ATT&CK Framework and Diamond Model. ISSE 2022 - 2022 8th IEEE International Symposium on Systems Engineering, Conference Proceedings. Institute of Electrical and Electronics Engineers Inc., 2023. (ISSE 2022 - 2022 8th IEEE International Symposium on Systems Engineering, Conference Proceedings).

@inproceedings{4c57ce50e00b48129e4a7cd3b1b5ffe3,

title = "Comparing Attack Models for IT Systems: Lockheed Martin's Cyber Kill Chain, MITRE ATT\&CK Framework and Diamond Model",

abstract = "Cyberattacks are a serious challenge for any IT system, which motivates cybersecurity professionals and developers to constantly explore various attack models to analyse the cyberattack lifecycle used by attackers to mount their attacks. Several attack models have been proposed and successfully utilised to analyse the various types of cyberattacks and their mitigations. All the models offer different characteristics, advantages and disadvantages. Therefore, it is important to examine the most popular attack models to understand their characteristics and suitability for modelling specific types of attacks. This paper will examine characteristics, advantages and disadvantages of the three most popular attack models: The Lockheed Martin's Cyber Kill Chain, the MITRE ATT\&CK Framework and the Diamond Model. Finally, it will provide a comparative study of these three attack models to present a relative summary for selecting the most suitable attack model for a specific application.",

keywords = "Attack Models, Cyberattack, Diamond Model, Lockheed Martin's Cyber Kill Chain, MITRE ATT\&CK Framework",

author = "Nitin Naik and Paul Jenkins and Paul Grace and Jingping Song",

note = "Publisher Copyright: {\textcopyright} 2022 IEEE.; 8th IEEE International Symposium on Systems Engineering, ISSE 2022 ; Conference date: 24-10-2022 Through 26-10-2022",

year = "2023",

month = jan,

day = "10",

doi = "10.1109/ISSE54508.2022.10005490",

language = "English",

series = "ISSE 2022 - 2022 8th IEEE International Symposium on Systems Engineering, Conference Proceedings",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

booktitle = "ISSE 2022 - 2022 8th IEEE International Symposium on Systems Engineering, Conference Proceedings",

}

Naik, N, Jenkins, P, Grace, P & Song, J 2023, Comparing Attack Models for IT Systems: Lockheed Martin's Cyber Kill Chain, MITRE ATT&CK Framework and Diamond Model. yn ISSE 2022 - 2022 8th IEEE International Symposium on Systems Engineering, Conference Proceedings. ISSE 2022 - 2022 8th IEEE International Symposium on Systems Engineering, Conference Proceedings, Institute of Electrical and Electronics Engineers Inc., 8th IEEE International Symposium on Systems Engineering, ISSE 2022, Vienna, Awstria, 24/10/22. https://doi.org/10.1109/ISSE54508.2022.10005490

Comparing Attack Models for IT Systems: Lockheed Martin's Cyber Kill Chain, MITRE ATT&CK Framework and Diamond Model. / Naik, Nitin; Jenkins, Paul; Grace, Paul et al.
ISSE 2022 - 2022 8th IEEE International Symposium on Systems Engineering, Conference Proceedings. Institute of Electrical and Electronics Engineers Inc., 2023. (ISSE 2022 - 2022 8th IEEE International Symposium on Systems Engineering, Conference Proceedings).

Allbwn ymchwil: Pennod mewn Llyfr/Adroddiad/Trafodion Cynhadledd › Cyfraniad mewn cynhadledd › adolygiad gan gymheiriaid

TY - GEN

T1 - Comparing Attack Models for IT Systems

T2 - 8th IEEE International Symposium on Systems Engineering, ISSE 2022

AU - Naik, Nitin

AU - Jenkins, Paul

AU - Grace, Paul

AU - Song, Jingping

PY - 2023/1/10

Y1 - 2023/1/10

N2 - Cyberattacks are a serious challenge for any IT system, which motivates cybersecurity professionals and developers to constantly explore various attack models to analyse the cyberattack lifecycle used by attackers to mount their attacks. Several attack models have been proposed and successfully utilised to analyse the various types of cyberattacks and their mitigations. All the models offer different characteristics, advantages and disadvantages. Therefore, it is important to examine the most popular attack models to understand their characteristics and suitability for modelling specific types of attacks. This paper will examine characteristics, advantages and disadvantages of the three most popular attack models: The Lockheed Martin's Cyber Kill Chain, the MITRE ATT&CK Framework and the Diamond Model. Finally, it will provide a comparative study of these three attack models to present a relative summary for selecting the most suitable attack model for a specific application.

AB - Cyberattacks are a serious challenge for any IT system, which motivates cybersecurity professionals and developers to constantly explore various attack models to analyse the cyberattack lifecycle used by attackers to mount their attacks. Several attack models have been proposed and successfully utilised to analyse the various types of cyberattacks and their mitigations. All the models offer different characteristics, advantages and disadvantages. Therefore, it is important to examine the most popular attack models to understand their characteristics and suitability for modelling specific types of attacks. This paper will examine characteristics, advantages and disadvantages of the three most popular attack models: The Lockheed Martin's Cyber Kill Chain, the MITRE ATT&CK Framework and the Diamond Model. Finally, it will provide a comparative study of these three attack models to present a relative summary for selecting the most suitable attack model for a specific application.

KW - Attack Models

KW - Cyberattack

KW - Diamond Model

KW - Lockheed Martin's Cyber Kill Chain

KW - MITRE ATT&CK Framework

UR - https://www.scopus.com/pages/publications/85146954365

U2 - 10.1109/ISSE54508.2022.10005490

DO - 10.1109/ISSE54508.2022.10005490

M3 - Conference contribution

AN - SCOPUS:85146954365

T3 - ISSE 2022 - 2022 8th IEEE International Symposium on Systems Engineering, Conference Proceedings

BT - ISSE 2022 - 2022 8th IEEE International Symposium on Systems Engineering, Conference Proceedings

PB - Institute of Electrical and Electronics Engineers Inc.

Y2 - 24 October 2022 through 26 October 2022

ER -

Naik N, Jenkins P, Grace P, Song J. Comparing Attack Models for IT Systems: Lockheed Martin's Cyber Kill Chain, MITRE ATT&CK Framework and Diamond Model. Yn ISSE 2022 - 2022 8th IEEE International Symposium on Systems Engineering, Conference Proceedings. Institute of Electrical and Electronics Engineers Inc. 2023. (ISSE 2022 - 2022 8th IEEE International Symposium on Systems Engineering, Conference Proceedings). doi: 10.1109/ISSE54508.2022.10005490