arXiv Open Access 2025

So, I climbed to the top of the pyramid of pain -- now what?

Vasilis Katos Emily Rosenorn-Lanng Jane Henriksen-Bulmer Ala Yankouskaya
Lihat Sumber

Abstrak

This paper explores the evolving dynamics of cybersecurity in the age of advanced AI, from the perspective of the introduced Human Layer Kill Chain framework. As traditional attack models like Lockheed Martin's Cyber Kill Chain become inadequate in addressing human vulnerabilities exploited by modern adversaries, the Humal Layer Kill Chain offers a nuanced approach that integrates human psychology and behaviour into the analysis of cyber threats. We detail the eight stages of the Human Layer Kill Chain, illustrating how AI-enabled techniques can enhance psychological manipulation in attacks. By merging the Human Layer with the Cyber Kill Chain, we propose a Sociotechnical Kill Plane that allows for a holistic examination of attackers' tactics, techniques, and procedures (TTPs) across the sociotechnical landscape. This framework not only aids cybersecurity professionals in understanding adversarial methods, but also empowers non-technical personnel to engage in threat identification and response. The implications for incident response and organizational resilience are significant, particularly as AI continues to shape the threat landscape.

Topik & Kata Kunci

Penulis (4)

V

Vasilis Katos

E

Emily Rosenorn-Lanng

J

Jane Henriksen-Bulmer

A

Ala Yankouskaya

Format Sitasi

Katos, V., Rosenorn-Lanng, E., Henriksen-Bulmer, J., Yankouskaya, A. (2025). So, I climbed to the top of the pyramid of pain -- now what?. https://arxiv.org/abs/2505.24685

Akses Cepat

Lihat di Sumber
Informasi Jurnal
Tahun Terbit
2025
Bahasa
en
Sumber Database
arXiv
Akses
Open Access ✓