TY - THES A1 - Schwabe, Carina T1 - Derivation of a technical representation of the MITRE ATT&CK matrix and further analyses of the kill chain N2 - In modern societies, technology has a high value, as nearly all systems are controlled by information technology. This thesis aims to develop a technical representation of the MITRE ATT&CK matrix to enable faster and more effective responses to cyber attacks. Based on a analysis of common cyber attack models, such as the Diamnond Model of Intrusion Analysis and the Lockheed Martin Cyber Kill Chain, the MITRE ATT&CK matrix is used to develop an extended Kill Chain model. In this new model, MITRE tactics are grouped into five sequential attack phases, allowing for a clearer differentiation between actions taken during an attack. Aditionally, one ongoing group of MITRE tactics was identified. Building on this model, two graph-based representations are developed: a simple graph structure and a hierarchical, tree-shaped graph of MITRE tactics and techniques. The following discussion addresses the practical application of the new model, as well as potential further developments, such as integrating AI to analyse and predict existing and potential attack patterns. KW - Computersicherheit KW - MITRE KW - Modellierung Y1 - 2024 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:522-opus4-32152 PB - Technische Hochschule Brandenburg CY - Brandenburg an der Havel ER - TY - THES A1 - Ferneding, Conrad T1 - Analysis of Vulnerability CVE-2024-3094 in XZ Utils: Precedent Supply Chain Attack and Incident Analysis N2 - This thesis falls within the domain of cybersecurity and computer science, specifically focusing on the vulnerability CVE-2024-3094, which has a CVSS score of 10, discovered in late March of 2024. It integrates methodologies from network security, reverse engineering, and OSINT to thoroughly investigate this vulnerability. An aspect of this thesis will be the exploration of the incident and its social engineering campaign that led to a threat actor becoming a maintainer of XZ Utils. Another part of this work will be the analysis of how the vulnerability in XZ Utils affects SSH and whether SSH authentication is compromised by this vulnerability. The objective is to conduct a Proof of Concept (PoC) to demonstrate the presence of the backdoor. KW - Computersicherheit KW - Reverse Engineering KW - Social Engineering Y1 - 2024 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:522-opus4-32278 PB - Technische Hochschule Brandenburg CY - Brandenburg an der Havel ER -