Who are the Attackers?
Understanding who might attack a system helps us prioritize defenses. Attackers, or 'threat actors', come in many forms, each with different motivations and resources.
| Actor Type | Description | Motivation |
|---|---|---|
| Script Kiddies | Inexperienced individuals using pre-written tools. | Curiosity, ego, basic mischief. |
| Hacktivists | Groups attacking systems for political or social change. | Ideological goals, public protest. |
| Organized Crime | Professional groups running cybercrime syndicates. | Financial gain (ransomware, bank fraud). |
| Insider Threats | Current or former employees. | Espionage, revenge, negligence, financial gain. |
| State-Sponsored Actors | Government entities conducting cyber warfare. | Espionage, sabotage, disrupting national security. |
The Concept of 'Threat'
A threat is any potential danger that might exploit a vulnerability. The severity of a threat is often judged by the Capability (skill/resources) and the Intent (motivation) of the threat actor.