In the Diamond Model, which element represents the means by which the attacker can inflict harm (tools, techniques, and capabilities)?

In the Diamond Model, which element represents the means by which the attacker can inflict harm (tools, techniques, and capabilities)?

• A. Adversary
• B. Victim
• C. Capability
• D. Infrastructure

Answer: (C)

The Diamond Model describes four elements—the attacker, the target, the infrastructure, and the capability. The means by which the attacker can inflict harm—tools, techniques, and the overall ability to carry out the attack—are captured in the capability. This is the attacker’s set of abilities that enables the harmful action, including the malware or exploit used, the methods of delivering and executing it, and the procedural know-how behind the intrusion. The other elements describe who is carrying out the attack (the attacker), who is targeted (the victim), and the supporting setup (infrastructure) that facilitates delivery and operations; they don't define the attacker’s actual means. For example, a phishing email that leads to malware installation involves a capability—the combination of the phishing technique and the malware used—as the core means of harm, while the infrastructure might be the email server used to send the message, and the victim is the person targeted.

The Diamond Model describes four elements—the attacker, the target, the infrastructure, and the capability. The means by which the attacker can inflict harm—tools, techniques, and the overall ability to carry out the attack—are captured in the capability. This is the attacker’s set of abilities that enables the harmful action, including the malware or exploit used, the methods of delivering and executing it, and the procedural know-how behind the intrusion. The other elements describe who is carrying out the attack (the attacker), who is targeted (the victim), and the supporting setup (infrastructure) that facilitates delivery and operations; they don't define the attacker’s actual means. For example, a phishing email that leads to malware installation involves a capability—the combination of the phishing technique and the malware used—as the core means of harm, while the infrastructure might be the email server used to send the message, and the victim is the person targeted.