Pivot Attack Classification for Cyber Threat Intelligence

The initial access achieved by cyber adversaries conducting a systematic attack against targeted network is unlikely to be an asset of interest. Therefore, it necessary use lateral movement techniques expand different devices within the accomplish strategic attack’s objectives. pivot technique widely used in this context; attacker creates indirect communication tunnel with target and uses traffic forwarding methods send receive commands. Recognising classifying large corporate networks complex task, due number events generated. In paper, we present classification criteria based on perceived indicators (IoA) identify level connectivity adversary. Additionally, automatic classifier algorithm proposed include attribute introduce novel capability for APIVADS detection scheme. new includes differentiate between types attacks contribute threat intelligence capabilities regarding adversary modus operandi. To best our knowledge, first academic peer-reviewed study providing criteria.