The concept of the kill chain focuses on the different stages of an online attack - reconnaissance, infection, remote control - and attempting to disrupt the chain as early as possible in an attack.
"Some attacks are more complex than others. The important thing is that in all cases, we only need to break one link to break the chain," says Simon Bryden, consulting systems engineer at Fortinet.
In an interview with Information Security Media Group at Infosecurity Europe, Bryden also details:
- The stages of the kill chain;
- The importance of education;
- Threat intelligence trends.
Bryden is a consulting systems engineer at Fortinet who represents FortiGuard labs - including its threat-intelligence capabilities - in the Europe, Middle East and Africa region. He has more than 25 years of IT industry experience at such organizations as Popular Telephony, Trustive, Corona Networks and Bay Networks.