Survey and Taxonomy of Adversarial Reconnaissance Techniques
Abstract
Adversaries are often able to penetrate networks and compromise systems by exploiting vulnerabilities in people and systems. The key to the success of these attacks is information that adversaries collect throughout the phases of the cyber kill chain. We summarize and analyze the methods, tactics, and tools that adversaries use to conduct reconnaissance activities throughout the attack process. First, we discuss what types of information adversaries seek and how and when they can obtain this information. Then, we provide a taxonomy and detailed overview of adversarial reconnaissance techniques. The taxonomy introduces a categorization of reconnaissance techniques based on the source as third-party and human-, and system-based information gathering. This article provides a comprehensive view of adversarial reconnaissance that can help in understanding and modeling this complex but vital aspect of cyber attacks as well as insights that can improve defensive strategies, such as cyber deception.
Document Details
- Document Type
- Pub Defense Publication
- Publication Date
- Dec 07, 2022
- Source ID
- 10.1145/3538704
Entities
People
- Aron Laszka
- Christopher Kiekintveld
- Jaime C. Acosta
- Nazia Sharmin
- Shanto Roy
Organizations
- Army Research Office
- National Science Foundation
- United States Army Research Laboratory
- University of Houston
- University of Texas at El Paso