Skip to main content
UploadLanguage (EN)Support
BusinessMobileSocial MediaMarketingTechnologyArt & PhotosCareerDesignEducationPresentations & Public SpeakingGovernment & NonprofitHealthcareInternetLawLeadership & ManagementAutomotiveEngineeringSoftwareRecruiting & HRRetailSalesServicesScienceSmall Business & EntrepreneurshipFoodEnvironmentEconomy & FinanceData & AnalyticsInvestor RelationsSportsSpiritualNews & PoliticsTravelSelf ImprovementReal EstateEntertainment & HumorHealth & MedicineDevices & HardwareLifestyle
AG
Uploaded byAnkita Ganguly
PPTX, PDF5,041 views

Cyber kill chain

The cyber kill chain describes cyber attacks from an attacker's perspective through distinct phases: (1) reconnaissance, (2) weaponization, (3) delivery, (4) exploitation, (5) installation, (6) command and control, and (7) actions on objectives. Each phase of the kill chain can be mapped to defensive tools and actions to prevent attacks. Understanding the kill chain stages gives analysts insight into what is being attempted and how to respond appropriately. The kill chain was developed by Lockheed Martin as a method to describe intrusions and prevent advanced persistent threats by highly trained adversaries targeting sensitive information.

Technology◦
Downloaded 88 times
CYBER KILL CHAIN Ankita Ganguly(8130)
WHAT IS CYBER KILL CHAIN?  The Cyber Kill Chain was socialized by Lockheed Martin  It was developed as a method for describing an intrusion from an attacker’s point of view  It is used to prevent APT – Advanced Persistent Threat, represents well – resourced and trained adversaries that conduct multi-year intrusion campaigns targeting highly sensitive economic, proprietary, or national security information
CYBER KILL CHAIN STAGES
COURSES OF ACTION Phase Detect Deny Disrupt Degrade Deceive Reconnaissance Firewall,NIDS,Web Logs Firewall, NIPS *** *** *** Weaponization DNS Monitoring Website Monitoring *** *** *** *** Delivery Antivirus, NIDS, Vigilant User NIPS, Proxy In-line AV *** *** Exploitation NIDS Anti Virus Antivirus System Patching Antivirus System Patching Restricted User Account *** Installation Anti Virus, Application Logs Anti virus *** *** Command & Control CIC, Malware Sandbox, NIDS Firewall NIPS *** *** Actions on Objectives Application Logs Firewall, VLANs VLANs *** ***
WHAT CAN THE CYBER KILL CHAIN DO?  Each phase of the kill chain can be mapped to corresponding defensive tool and action  An analyst who knows the stages of the kill chain has a basic understanding of what is being attempted and what response is called for
Cyber kill chain