An Introduction to Cyber Analysis and Targeting

Abstract

Intro -- Foreword -- Contents -- Chapter 1: Cyber Analysis and Targeting -- 1.1 Key Cyber Analysis and Targeting Questions -- 1.2 Organization of This Book -- Bibliography -- Chapter 2: Cyber Policy, Doctrine, and Tactics, Techniques, and Procedures (TTPs) -- 2.1 Background -- 2.1.1 Policy, Doctrine, and TTP Definitions -- 2.2 Introduction -- 2.3 Policy -- 2.3.1 Use of Force Policy for Cyber -- 2.3.2 Authorities -- 2.3.2.1 Maritime Example: Harbor Lights and World War II (Delayed Authorities) -- 2.3.2.2 Pre-delegation of Authorities -- 2.3.3 Schmitt's Six Criteria to Establish State Responsibility -- 2.3.4 Policy Example: Coreflood Botnet -- 2.4 Doctrine -- 2.4.1 Example US Department of Defense (DoD) Instructions, Directives, and Doctrine for Cyberspace Analysis and Targeting -- 2.4.2 Critical Security Controls (CSC) -- 2.5 Tactics, Techniques, and Procedures (TTPs) -- 2.6 Summary -- Bibliography -- Chapter 3: Taxonomy of Cyber Threats -- 3.1 Background -- 3.2 NIST Cyber Taxonomy Examples -- 3.3 Cyber System Threats: Risk Evaluation and Cyber Threat Understanding -- 3.3.1 Cyber Security Data Standards -- 3.3.2 DREAD, STRIDE, and CVSS -- 3.3.3 Process for Attack Simulation and Threat Analysis (PASTA) -- 3.4 Data-Sharing Models -- 3.4.1 Cyber Threat Data Providers -- 3.4.2 Cyber Threat Data and System Defense -- 3.5 System Engineering and Vulnerability Evaluation -- 3.5.1 DoD Cyber Security Analysis Approaches and Tools -- 3.5.2 Analysis and Targeting Use of Cyber Threat Data Examples -- 3.5.2.1 Use of Vulnerabilities/Exploits for Cyber System Defense -- 3.5.2.2 Use of Vulnerabilities/Exploits for Cyber System Attack -- 3.6 Summary -- Bibliography -- Chapter 4: Cyber Influence Operations -- 4.1 Cyber Influence Operations Background -- 4.1.1 Information Operations (IO) Background -- 4.1.2 Influence Operations, Advertising, and Propaganda.