The Diamond Model of Intrusion Analysis
The model represents a security incident or event. In the Diamond Model, an event is a time-bound activity that is restricted to a specific step in which an adversary uses a capability over infrastructure to attack a victim to achieve a specific result. The Diamond Model of Intrusion Analysis is made up of four parts …