| Title: | OS5-1 A Diamond Model Approach to Analyzing GhostSec's Intrusion Paths |
|---|---|
| Publication: | ICAROB2025 |
| Volume: | 30 |
| Pages: | 114-118 |
| ISSN: | 2188-7829 |
| DOI: | 10.5954/ICAROB.2025.OS5-1 |
| Author(s): | Cheng-Ying He, Nai-Yu Chen, Jung-Shain Li, I-Hsien Liu |
| Publication Date: | February 13, 2025 |
| Keywords: | Industrial Control Systems, Diamond Model, ICS Cyber Kill Chain, Cyber threat intelligence |
| Abstract: | The convergence of Operational Technology (OT) and Information Technology (IT) has heightened risks for critical infrastructure (CI) and industrial control systems (ICS), leading to a surge in diverse and sophisticated OT attacks with severe consequences. Thus, this study combines the Diamond Model with the Cyber Kill Chain to analyze potential attack paths and methods in the GhostSec case, where attackers compromised a Berghof PLC to demonstrate their access capabilities. Understanding these attack paths offers valuable insights into adversary strategies, aiding in the development of defense measures to prevent similar attacks. |
| PDF File: | https://alife-robotics.co.jp/members2025/icarob/data/html/data/OS/OS5/OS5-1.pdf |
| Copyright: | © The authors. This article is distributed under the terms of the Creative Commons Attribution License 4.0, which permits non-commercial use, distribution and reproduction in any medium, provided the original work is properly cited. See for details: https://creativecommons.org/licenses/by-nc/4.0/ |
(c)2008 Copyright The Regents of ALife Robotics Corporation Ltd. All Rights Reserved.