3 papers
cs.CR2025
Consistent and Compatible Modelling of Cyber Intrusions and Incident Response Demonstrated in the Context of Malware Attacks on Critical Infrastructure
Peter Maynard, Yulia Cherdantseva, Avi Shaked +2
Cyber Security Incident Response (IR) Playbooks are used to capture the steps required to recover from a cyber intrusion. Individual IR playbooks should focus on a specific type of…
cs.CR2020
Big Fish, Little Fish, Critical Infrastructure: An Analysis of Phineas Fisher and the 'Hacktivist' Threat to Critical Infrastructure
Peter Maynard, Kieran McLaughlin
The hacktivist threat actor is listed in many risk decision documents. Yet their tactics and techniques often remain a mystery. We create a MITRE ATT&CK (ATT&CK) model of a well kn…
cs.CR2020
Towards Understanding Man-on-the-Side Attacks (MotS) in SCADA Networks
Peter Maynard, Kieran McLaughlin
We describe a new class of packet injection attacks called Man-on-the-Side Attacks (MotS), previously only seen where state actors have "compromised" a number of telecommunication…