A Diamond Model Analysis on Twitter's Biggest Hack

Chaitanya Rahalkar

doi:10.32628/IJSRSET24116191

Authors

Chaitanya Rahalkar Department of Cyber Security and Privacy, Georgia Institute of Technology, Atlanta, GA, USA Author

DOI:

https://doi.org/10.32628/IJSRSET24116191

Keywords:

Diamond Model Analysis, Cybersecurity Analysis, Privacy Analysis

Abstract

Cyberattacks have prominently increased over the past few years now, and have targeted actors from a wide variety of domains. Understanding the motivation, infrastructure, attack vectors, etc. behind such attacks is vital to proactively work against preventing such attacks in the future and also to analyze the economic and social impact of such attacks. In this paper, we leverage the diamond model to perform an intrusion analysis case study of the 2020 Twitter account hijacking Cyberattack. We follow this standardized incident response model to map the adversary, capability, infrastructure, and victim and perform a comprehensive analysis of the attack, and the impact posed by the attack from a Cybersecurity policy standpoint.

Downloads

Download data is not yet available.

References

An Update on Our Security Incident. https://blog.twitter.com/en us/topics/company/2020/anupdate-on-our-security-incident. Accessed 8 Dec. 2021.

Emerald Expert Briefings. Emerald Expert Briefings, 24 July 2020

Hackers Convinced Twitter Employee to Help Them Hijack Accounts. https://www.vice.com/en/article/jgxd3d/twitter-insider-access-panel-account-hacks-bidenuber-bezos. Accessed 8 Dec. 2021.

Man Arrested in Connection with Alleged Role in Twitter Hack. 21 July 2021, https://www.justice.gov/opa/pr/man-arrested-connection-alleged-role-twitter-hack

“The Twitter Hack: How Did They Do It?” ISACA, https://www.isaca.org/resources/news-andtrends/isaca-now-blog/2020/the-twitter-hack-how-did-they-do-it. Accessed 8 Dec. 2021.

Thompson, Nicholas. “How Twitter Survived Its Biggest Hack—and Plans to Stop the Next One.” Wired. www.wired.com, https://www.wired.com/story/inside-twitter-hack-electionplan/. Accessed 8 Dec. 2021.

“Twitter Investigation Report.” Department of Financial Services, https://www.dfs.ny.gov/Twitter Report. Accessed 8 Dec. 2021.

Caltagirone, Sergio, Andrew Pendergast, and Christopher Betz. The diamond model of intrusion analysis. Center For Cyber Intelligence Analysis and Threat Research Hanover Md, 2013. Accessed. 8 Dec. 2021.

Beautiful, Information is. “World’s Biggest Data Breaches & Hacks.” Information Is Beautiful, https://informationisbeautiful.net/visualizations/worlds-biggest-data-breaches-hacks/. Accessed 8 Dec. 2021.