Kill Chain
A cybersecurity framework originally proposed by Lockheed Martin that decomposes a complete cyberattack into seven stages: reconnaissance, weaponization, delivery, exploitation, installation, command and control, and actions on objectives. It is used to guide the formulation of defensive strategies.
Core Facts
Timeline (last 90 days)
An exploit chain refers to an exploitation method in which an attacker links multiple independent security flaws in a specific order to gradually escalate privileges or expand the impact surface.
Defending against exploit chains means not simply prioritizing remediation by the CVSS score of individual vulnerabilities, but examining whether a combination of "low-risk + low-risk" forms a high-risk path, and cutting off key links in the chain through means such as least privilege, disabling dangerous functions and limiting the scope of file operations.
The cybersecurity attack chain model (Kill Chain) was first proposed by Lockheed Martin in 2011.
All Facts (3)
The cybersecurity attack chain model (Kill Chain) was first proposed by Lockheed Martin in 2011.
90%UnverifiedAn exploit chain refers to an exploitation method in which an attacker links multiple independent security flaws in a specific order to gradually escalate privileges or expand the impact surface.
50%UnverifiedDefending against exploit chains means not simply prioritizing remediation by the CVSS score of individual vulnerabilities, but examining whether a combination of "low-risk + low-risk" forms a high-risk path, and cutting off key links in the chain through means such as least privilege, disabling dangerous functions and limiting the scope of file operations.
50%