Cyberattacks don't magically happen; they involve a series of steps. And far from being helpless, defenders can disrupt the attack at any of those steps. This framing has led to something called the "cybersecurity kill chain": a way of thinking about cyber defense in terms of disrupting the attacker's process. On a similar note, it'sโฆ
Bruce proposes a model to apply the cybersecurity kill chain to the problem of thwarting information operations of the types that we're seeing day-to-day in the cyberwar landscape. Or at least, to understand it. Interesting reading, but - and call me cynical - I don't know if it's possible to implement some of the kill-stops that would be required to produce a meaningful barrier.
0 comments