Threat Modeling for Managed Attribution: Part 1
Threat modeling for managed attribution systems requires a different methodology. We have developed a new framework that combats threats that are specific to managed attribution.
17Jul
Canary Trap: The Biggest Risk for Online Identities
The most effective way to expose online identities and aliases is a technique called the Canary Trap or the Barium Meal Test. None of the standard managed attribution practices are effective in thwarting it because it attacks the human operator, rendering most tools ineffective.
03Jul
Non-Technical Indicators: How to Blend in Online
When conducting intelligence operations, it is important to avoid attention.We have all heard the advice, “When in Rome, do as the Romans do,” but how do we achieve that when we are in Rome.com? What different factors will make us stand out from the crowd and attract unwanted attention during online operations? ...
22May
What is Misattribution – Part 4: Misattribution Challenges
If you read the first blogs of this series, you know what misattribution is, why it’s important, and the various technical and non-technical elements that go into it. You know when to manage your attribution, why that’s often a better choice than being anonymous, and some kinds of tools available to...
08May
What is Misattribution – Part 3: Non-Technical Misattribution
In part three of four of our series on misattribution, I’ll explore non-technical misattribution: basically, everything that identifies someone online other than the information that computers and networks reveal.
24Apr
What is Misattribution – Part 2: Technical Misattribution
Technical misattribution is the process of masking the identifying information that computers and networks reveal. In part two of this four-part series, I will take a look at technical misattribution specifically.
10Apr
What is Misattribution? Part 1: Digital Misattribution
Misattribution is a term used mostly within the national security community to refer to activities conducted under some kind of assumed identity. In this four-part series, I will go into detail about digital misattribution, operational misattribution, and misattribution challenges.