000			02004nam a2200253 4500
001			396366
010			_a9789292045098
090			_a396366
100			_a20210930u y0pory50 ba
101			_aeng
200			_aThreat landscape for supply chain attacks _bRecurso eletrónico
210			_a[Attiki] _cEuropean Union Agency for Cybersecurity, ENISA _d2021
215			_a1 CD-ROM _d12 cm
300			_aFicheiro de 4,78 MB em formato PDF (57 p.).
330			_aIntroduction. 2. What is a supply chain attack? 2.1. Taxonomy of supply chain attacks. 2.2. Attack techniques used to compromise a supply chain. 2.3. Supplier assets targeted by a supply chain attack. 2.4. Attack techniques used to compromise a customer. 2.5. Customer assets targeted by a supply chain attack. 2.6. How to make use of the taxonomy. 2.7. Supply chain taxonomy and other frameworks. 2.7.1. MITRE ATT&CK® Knowledge Base. 2.7.2. Lockheed Martin Cyber Kill Chain® Framework. 3. The lifecycle of a supply chain attack. 4. Prominent supply chain attacks. 4.1. Solarwinds orion: it management and remote monitoring. 4.2. Mimecast: cloud cybersecurity services. 4.3. Ledger: hardware wallet. 4.4. kaseya: it management services compromised with ransomware. 4.5. an example of many unknowns: sita passenger service system. 5. Analysis of supply chain incidents. 5.1. Timeline of supply chain attacks. 5.2. Understanding the flow of attacks. 5.3. Goal oriented attackers. 5.4. Most attack vectors to compromise suppliers remain unknown. 5.5. Sophisticated attacks attributed to apt groups. 6. Not everything is a supply chain attack. 7. Recommendations. 8. Conclusions. Annex A: summary of supply chain attacks.
606			_aCRIME INFORMÁTICO _9301395
606			_aSEGURANÇA INFORMÁTICA _9273163
606			_aPROTECÇÃO DE SOFTWARE _9329941
606			_aSEGURANÇA DE DADOS _9325959
710			_aENISA _9359250
955			_xOferta