If you read the first blogs of this series, you know what misattribution is, why it’s important, and the various technical and non-technical elements that go into it. You know when to manage your attribution, why that’s often a better choice than being anonymous, and some kinds of tools available to...
In part three of four of our series on misattribution, I’ll explore non-technical misattribution: basically, everything that identifies someone online other than the information that computers and networks reveal.
Technical misattribution is the process of masking the identifying information that computers and networks reveal. In part two of this four-part series, I will take a look at technical misattribution specifically.
Misattribution is a term used mostly within the national security community to refer to activities conducted under some kind of assumed identity. In this four-part series, I will go into detail about digital misattribution, operational misattribution, and misattribution challenges.
When reading the Mueller indictment of the Russian DNC hackers, I was stunned to see just how much visibility the US had into the hackers’ operations. In my recent Security Week article, I examine the hackers’ attempts to obfuscate their activities, and discuss what particular actions led to misattribution failure.
Effective managed attribution (MA) is critical for successful cyber investigations and can be achieved by leveraging the right technologies and practicing proper OPSEC online.
