6.1 攻击动机
Vocabulary Name: attack-motivation-ov
The attack motivation vocabulary is currently used in the following SDOs:
- Intrusion Set
- Threat Actor
Knowing a Threat Actor or Intrusion Set's motivation may allow an analyst or defender to better understand likely targets and behaviors.
Motivation shapes the intensity and the persistence of an attack. Threat Actors and Intrusion Sets usually act in a manner that reflects their underlying emotion or situation, and this informs defenders of the manner of attack. For example, a spy motivated by nationalism (ideology) likely has the patience to achieve long-term goals and work quietly for years, whereas a cyber-vandal out for notoriety can create an intense and attention-grabbing attack but may quickly lose interest and move on. Understanding these differences allows defenders to implement controls tailored to each type of attack for greatest efficiency.
This section including vocabulary items and their descriptions is based on the Threat Agent Motivations publication from Intel Corp in February 2015 [Casey 2015].
| Vocabulary Summary | |
|---|---|
| accidental, coercion, dominance, ideology, notoriety, organizational-gain, personal-gain, personal-satisfaction, revenge, unpredictable | |
| Vocabulary Value | Description |
| accidental 偶然 | A non-hostile actor whose benevolent or harmless intent inadvertently causes harm. |
| coercion 强迫 | Being forced to act on someone else's behalf. |
| dominance 霸主 | A desire to assert superiority over someone or something else. |
| ideology 传达思想 | A passion to express a set of ideas, beliefs, and values that may shape and drive harmful and illegal acts. |
| notoriety 出名 | Seeking prestige or to become well known through some activity. |
| organizational-gain 组织利益 | Seeking advantage over a competing organization, including a military organization. |
| personal-gain 个人利益 | The desire to improve one’s own financial status. |
| personal-satisfaction 个人满足 | A desire to satisfy a strictly personal goal, including curiosity, thrill-seeking, amusement, etc. |
| revenge 复仇 | A desire to avenge perceived wrongs through harmful actions such as sabotage, violence, theft, fraud, or embarrassing certain individuals or the organization. |
| unpredictable 不可预料 | Acting without identifiable reason or purpose and creating unpredictable events. |