disrupting nation state hackers - usenix · disrupting nation state hackers january 2016. intrusion...

Post on 06-Aug-2018

229 Views

Category:

Documents

0 Downloads

Preview:

Click to see full reader

TRANSCRIPT

DISRUPTING NATION STATE HACKERS

JANUARY 2016

INTRUSION PHASES• Reconnaissance

• Initial Exploitation

• Establish Persistence

• Install Tools

• Move Laterally

• Collect Exfil and Exploit

RECONNAISSANCE

Intrusion Phase 1

RECONNAISSANCE

Intrusion Phase 1

RECONNAISSANCE

Intrusion Phase 1

RECONNAISSANCE

Intrusion Phase 1

INITIAL EXPLOITATION

Intrusion Phase 2

INITIAL EXPLOITATION

Intrusion Phase 2

INITIAL EXPLOITATION

Intrusion Phase 2

INITIAL EXPLOITATION

Intrusion Phase 2

ESTABLISH PERSISTENCE

Intrusion Phase 3

INSTALL TOOLS

Intrusion Phase 4

MOVE LATERALLY

Intrusion Phase 5

MOVE LATERALLY

Intrusion Phase 5

MOVE LATERALLY

Intrusion Phase 5

MOVE LATERALLY

Intrusion Phase 5

COLLECT, EXFIL AND EXPLOIT

Intrusion Phase 6

WWW.NSA.GOV

Navigate to:

- Information Assurance

-Mitigation Guidance

top related