Using Attack Tree to study all possible threats that may be used to attack your victim using social engineering. It is very important to understand it very well before teaching people security awareness and how to be protected in Home, Work , or Public
Great example of the strength of attack trees! In my view also the best (and perhaps the only) way to assess the security of CII. The process of selecting cyber failure scenarios and building the attack trees to realize the scenario objective gives much more insight on the vulnerabilities of a complex production installation than a checklist can do.
ReplyDeleteUnfortunately a technique not often used because of its cost (high effort) and skill requirements (security plus process control skills). But a method that provides good insight in where the most important vulnerabilities are in the system and how to best mitigate them and where to best detect an attack.