[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Threat actor classification info for today's meeting
Everyone, Here is the research I mentioned in the CTI meeting today regarding threat actor characterization. As I mentioned, for some time my
team has been studying human threats as a class. We could not find a system that characterized threat actors objectively and orthogonally, so drawing on available research we developed our own taxonomy to describe human threat. It describes threat at the
strategic level, so we do not need attributes for every low-level activity such as “Steals designs for new products” and “Copies secret recipe,” instead we use the more inclusive “Gain technical advantage.” From the taxonomy we created a library of 23 threat actor
classes, which we call "threat agents" to differentiate from actual people. The Library is intended to be universal in application without bias towards terrorism, hacktivism, etc., or to organization such as LEOs or government agencies. It contains
well-defined characters such as Government Spy, Data Miner, Disgruntled Employee, Radical Activist, Cyber Vandal, etc. We also couldn't find a fully orthogonal and comprehensive classification for motivation, so drawing on LEO and psychology research we developed
a 10-point Motivation classification: Accidental, Coercion, Disgruntlement, Dominance, Ideology, Notoriety, Organizational Gain, Personal Financial Gain, Personal Satisfaction, and Unpredictable.
Respectfully,
Tim Tim Casey Senior Strategic Risk Analyst Threat Intelligence & Infrastructure Protection
Intel Corporation Chandler, AZ USA 480-552-0222 @timcaseycyber |
Attachment:
Intel Corp_Threat Agent Library_Sep2007.pdf
Description: Intel Corp_Threat Agent Library_Sep2007.pdf
Attachment:
Intel Corp_Threat Agent Motivations_Feb2015.pdf
Description: Intel Corp_Threat Agent Motivations_Feb2015.pdf
Attachment:
A Field Guide to Insider Threat_Intel Corp_Oct 2015.pdf
Description: A Field Guide to Insider Threat_Intel Corp_Oct 2015.pdf
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]