Enhanced Attribution
Abstract
The Enhanced Attribution program developed technologies to associate malicious cyber actions with individual adversary operators, and to publicly reveal these actions without compromising sources and methods. The program focused on new approaches for identifying malicious cyber operators, analyzing their software tools and actions, and confirming this information with commercial and public sources of data. As the attribution techniques were developed and showed promise, they provided the basis for new cyber capabilities such as indications and warning of adversary cyber actions. These technologies were implemented in tools for evaluation by potential transition partners.
Document Details
- Document Type
- Accomplishment
- Publication Date
- Oct 01, 2024
- Source ID
- 926600d95703183875f03bd4d79017d1