What are Attack Graphs смотреть онлайн

Attack graphs ( https://www.xmcyber.com/glossary/what-are-attack-graphs/ ) are a type of visualization tool used in cybersecurity to model and analyze the potential attack paths that an attacker might take to compromise a computer system or network.


A cyber attack graph is a representation of all possible paths of attack against a cybersecurity network. It illustrates a state where an attacker has completed a successful breach. Attack graphs come in two popular forms. The first is a direct graph where nodes represent network states and edges represent exploits. The second is a direct graph where nodes represent pre or post-conditions of an exploit, and edges represent the consequences of having a pre-condition that enables an exploit post-condition.

Cybersecurity defenses must always be tested to ensure optimal asset protection. Scanning a network and identifying vulnerabilities is not enough. Complex environments require an understanding of how vulnerabilities interact with hosts and with each other. Cyber attack graphs help to understand these complexities and gain visibility into how exposures are likely to be exploited by adversaries. Red teams or “ethical hackers” assume the role of adversaries and launch attacks against uncovered vulnerabilities. Manual graphing process requires huge effort and is prone to error.

Automated attack graphing has become much more widely adopted in recent years. Automated exposure prioritization platforms use sophisticated attack modeling to identify how vulnerabilities can be exploited and how to prioritize their remediation according to key risk context. As cyber attack graphs continue to be refined and improved, they will play a greater role in the protection of “crown jewel” assets from determined adversaries. Thank you for watching our cyber security glossary about Attack Graphs created by XM cyber. We invite you to watch our other videos.


See more information about XM Cyber at https://www.xmcyber.com/


#attackgraph #cyberattack #cybersecurity