Comparing Attack Models for IT Systems: Lockheed Martin’s Cyber Kill Chain, MITRE ATT&CK Framework and Diamond Model

Nitin Naik; Paul Jenkins; Paul Grace; Jingping Song

doi:10.1109/ISSE54508.2022.10005490

Comparing Attack Models for IT Systems: Lockheed Martin’s Cyber Kill Chain, MITRE ATT&CK Framework and Diamond Model

Nitin Naik, Paul Jenkins, Paul Grace, Jingping Song

Research output: Chapter in Book/Published conference output › Conference publication

Abstract

Cyberattacks are a serious challenge for any IT system, which motivates cybersecurity professionals and developers to constantly explore various attack models to analyse the cyberattack lifecycle used by attackers to mount their attacks. Several attack models have been proposed and successfully utilised to analyse the various types of cyberattacks and their mitigations. All the models offer different characteristics, advantages and disadvantages. Therefore, it is important to examine the most popular attack models to understand their characteristics and suitability for modelling specific types of attacks. This paper will examine characteristics, advantages and disadvantages of the three most popular attack models: the Lockheed Martin’s Cyber Kill Chain, the MITRE ATT&CK Framework and the Diamond Model. Finally, it will provide a comparative study of these three attack models to present a relative summary for selecting the most suitable attack model for a specific application.

Original language	English
Title of host publication	ISSE 2022 - 2022 8th IEEE International Symposium on Systems Engineering, Conference Proceedings
Publisher	IEEE
ISBN (Electronic)	9781665481823
ISBN (Print)	9781665481830
DOIs	https://doi.org/10.1109/ISSE54508.2022.10005490
Publication status	Published - 2022
Event	8th IEEE International Symposium on Systems Engineering - Vienna, Austria Duration: 24 Oct 2022 → 26 Oct 2022 https://2022.ieeeisse.org/

Conference

Conference	8th IEEE International Symposium on Systems Engineering
Abbreviated title	ISSE 2022
Country/Territory	Austria
City	Vienna
Period	24/10/22 → 26/10/22
Internet address	https://2022.ieeeisse.org/

Bibliographical note

Publisher Copyright:
© 2022 IEEE.

Keywords

Attack Models
Cyberattack
Cyber Kill Chain
Lockheed Martin’s Cyber Kill Chain
MITRE ATT&CK Framework
Diamond model of intrusion analysis

Access to Document

10.1109/ISSE54508.2022.10005490

Cite this

@inproceedings{64236c596a42435792b04159375e2459,

title = "Comparing Attack Models for IT Systems: Lockheed Martin{\textquoteright}s Cyber Kill Chain, MITRE ATT&CK Framework and Diamond Model",

abstract = "Cyberattacks are a serious challenge for any IT system, which motivates cybersecurity professionals and developers to constantly explore various attack models to analyse the cyberattack lifecycle used by attackers to mount their attacks. Several attack models have been proposed and successfully utilised to analyse the various types of cyberattacks and their mitigations. All the models offer different characteristics, advantages and disadvantages. Therefore, it is important to examine the most popular attack models to understand their characteristics and suitability for modelling specific types of attacks. This paper will examine characteristics, advantages and disadvantages of the three most popular attack models: the Lockheed Martin{\textquoteright}s Cyber Kill Chain, the MITRE ATT&CK Framework and the Diamond Model. Finally, it will provide a comparative study of these three attack models to present a relative summary for selecting the most suitable attack model for a specific application.",

keywords = "Attack Models, Cyberattack, Cyber Kill Chain, Lockheed Martin{\textquoteright}s Cyber Kill Chain, MITRE ATT&CK Framework, Diamond model of intrusion analysis",

author = "Nitin Naik and Paul Jenkins and Paul Grace and Jingping Song",

note = "Publisher Copyright: {\textcopyright} 2022 IEEE.; 8th IEEE International Symposium on Systems Engineering, ISSE 2022 ; Conference date: 24-10-2022 Through 26-10-2022",

year = "2022",

doi = "10.1109/ISSE54508.2022.10005490",

language = "English",

isbn = "9781665481830",

booktitle = "ISSE 2022 - 2022 8th IEEE International Symposium on Systems Engineering, Conference Proceedings",

publisher = "IEEE",

address = "United States",

url = "https://2022.ieeeisse.org/",

}

Naik, N, Jenkins, P, Grace, P & Song, J 2022, Comparing Attack Models for IT Systems: Lockheed Martin’s Cyber Kill Chain, MITRE ATT&CK Framework and Diamond Model. in ISSE 2022 - 2022 8th IEEE International Symposium on Systems Engineering, Conference Proceedings. IEEE, 8th IEEE International Symposium on Systems Engineering, Vienna, Austria, 24/10/22. https://doi.org/10.1109/ISSE54508.2022.10005490

TY - GEN

T1 - Comparing Attack Models for IT Systems: Lockheed Martin’s Cyber Kill Chain, MITRE ATT&CK Framework and Diamond Model

AU - Naik, Nitin

AU - Jenkins, Paul

AU - Grace, Paul

AU - Song, Jingping

PY - 2022

Y1 - 2022

N2 - Cyberattacks are a serious challenge for any IT system, which motivates cybersecurity professionals and developers to constantly explore various attack models to analyse the cyberattack lifecycle used by attackers to mount their attacks. Several attack models have been proposed and successfully utilised to analyse the various types of cyberattacks and their mitigations. All the models offer different characteristics, advantages and disadvantages. Therefore, it is important to examine the most popular attack models to understand their characteristics and suitability for modelling specific types of attacks. This paper will examine characteristics, advantages and disadvantages of the three most popular attack models: the Lockheed Martin’s Cyber Kill Chain, the MITRE ATT&CK Framework and the Diamond Model. Finally, it will provide a comparative study of these three attack models to present a relative summary for selecting the most suitable attack model for a specific application.

AB - Cyberattacks are a serious challenge for any IT system, which motivates cybersecurity professionals and developers to constantly explore various attack models to analyse the cyberattack lifecycle used by attackers to mount their attacks. Several attack models have been proposed and successfully utilised to analyse the various types of cyberattacks and their mitigations. All the models offer different characteristics, advantages and disadvantages. Therefore, it is important to examine the most popular attack models to understand their characteristics and suitability for modelling specific types of attacks. This paper will examine characteristics, advantages and disadvantages of the three most popular attack models: the Lockheed Martin’s Cyber Kill Chain, the MITRE ATT&CK Framework and the Diamond Model. Finally, it will provide a comparative study of these three attack models to present a relative summary for selecting the most suitable attack model for a specific application.

KW - Attack Models

KW - Cyberattack

KW - Cyber Kill Chain

KW - Lockheed Martin’s Cyber Kill Chain

KW - MITRE ATT&CK Framework

KW - Diamond model of intrusion analysis

UR - https://ieeexplore.ieee.org/document/10005490

U2 - 10.1109/ISSE54508.2022.10005490

DO - 10.1109/ISSE54508.2022.10005490

M3 - Conference publication

SN - 9781665481830

BT - ISSE 2022 - 2022 8th IEEE International Symposium on Systems Engineering, Conference Proceedings

PB - IEEE

T2 - 8th IEEE International Symposium on Systems Engineering

Y2 - 24 October 2022 through 26 October 2022

ER -

Comparing Attack Models for IT Systems: Lockheed Martin’s Cyber Kill Chain, MITRE ATT&CK Framework and Diamond Model

Abstract

Conference

Bibliographical note

Keywords

Access to Document

Other files and links

Fingerprint

Cite this