A enterprise security operation center (SOC) analyst is categorizing threat actors and attack vectors identified during a comprehensive threat landscape assessment. Match each threat actor type or attack vector on the left with its primary operational attribute or delivery mechanism on the right.
- Shadow ITIntroduces unapproved hardware, software, or cloud solutions without organizational IT oversight, broadening the attack surface
- Advanced Persistent Threat (APT)Exhibits high resource capability, continuous stealthy operation, and extensive funding driven by geopolitical objectives
- Software Supply Chain AttackInjects malicious code into trusted third-party software updates to compromise downstream organizations
- Insider ThreatLeverages legitimate access rights and existing system privileges to exfiltrate sensitive organizational data
Cevap
Shadow IT matches with introducing unapproved software/hardware without IT oversight. Advanced Persistent Threat (APT) matches with high resource capability, stealth, and geopolitical motivations. Software Supply Chain Attack matches with injecting malicious code into trusted third-party updates. Insider Threat matches with leveraging legitimate access rights to exfiltrate data.
Shadow IT is characterized by unauthorized applications or services deployed without IT department knowledge or approval. An APT (Advanced Persistent Threat) is characterized by nation-state funding, extreme sophistication, and persistent stealthy intelligence gathering. A Software Supply Chain attack compromises trusted vendor software build systems to push malicious code into updates. An Insider Threat relies on legitimate access rights granted to an employee, contractor, or partner to bypass perimeter controls.
Adım Adım Çözüm
Anahtar Kavram
Threat Actor Attributes and Attack Vector Characteristics