← Back to CoursesEthical Hacking: PhD Level

Neuroanatomy Explorer

Drag to rotate · scroll to zoom · click regions to explore

View
Loading 3D model…

Click a region
to explore it

Memory Deck

Flip each card and rate whether you knew it. Your score is saved.

Term
Definition

Deck complete — score saved.

Match the Pairs

Match each term to its definition. Finish the board to earn your score.

All matched — score saved.

Concept Constellation

Every key idea in this course, mapped as an explorable 3D constellation. Drag to rotate, scroll to zoom, click a node.

Click a node to read its definition.

Threat Modeling, Attack Surfaces, and Adversary Capabilities

Manual: General · Subject: Ethical Hacking

Develops rigorous models for reasoning about attackers, targets, assumptions, and evaluation criteria.

Why Threat Models Matter

Modeling the Problem

Ethical hacking is strongest when it is hypothesis-driven. A threat model specifies adversary goals, capabilities, resources, constraints, and likely pathways of attack. Without a threat model, testing devolves into ad hoc poking; with one, findings become interpretable, comparable, and useful for defense.

Threat Modeling Terms

Asset
Something of value to protect, such as credentials, data, or uptime.
Attack surface
All reachable interfaces through which an attacker may interact with a system.
Adversary capability
The skill, access, tooling, and time available to the attacker.
Assumption
A condition treated as true for analysis, such as user behavior or trusted hardware.

High- vs Low-Fidelity Threat Models

High-fidelity model

  • Uses system-specific architecture and telemetry
  • Produces precise and testable hypotheses
  • Costlier to build but more actionable

Low-fidelity model

  • Captures only broad attacker classes
  • Good for early scoping
  • Can miss critical system-specific behaviors

What is the main value of a threat model in ethical hacking?

State one reason why attack surface analysis is central to offensive security research.

From Adversary Emulation to Abstraction

Abstraction Levels

Researchers often move between machine-level, protocol-level, and organizational-level abstractions. A robust study may begin with an abstract attacker class, then refine to a concrete adversary profile with specific tools and constraints. The challenge is balancing realism with reproducibility.

Building a Research Threat Model

  1. 1

    Identify the protected asset and security objective.

  2. 2

    Enumerate attack surfaces and trust boundaries.

  3. 3

    Define plausible adversary classes and capabilities.

  4. 4

    Select attack paths that are both realistic and measurable.

  5. 5

    Translate the model into testable hypotheses and metrics.

Which statement best describes a good research threat model?