Diamond Model

adversary

An entity that opposes or acts against another, often in a competitive or hostile manner, typically analyzed within the context of cybersecurity or threat modeling.

Adversary Operator

A person or group that executes attacks or exploits vulnerabilities in systems to achieve specific objectives, often analyzed in cybersecurity frameworks.

Adversary Customer

An entity or individual that is a target or intended victim of adversarial actions, often seeking to defend against threats or attacks in cybersecurity contexts.

Victim

target of the adversary. can be an organization, person, target email address, IP address, domain, etc.

Victim Personae

the people and organizations being targeted and whose assets are being attacked and exploited.

Victim Assets

the attack surface and include the set of systems, networks, email addresses, hosts, IP addresses, social networking accounts, etc., to which the adversary will direct their capabilities.

Capability

the tools, techniques, and resources that an adversary employs to exploit a victim or achieve their objectives. tactics, techniques, and procedures (TTPs). 

Capability Capacity

All of the vulnerabilities and exposures that the individual capability can use. 

Adversary Arsenal

the complete set of tools, techniques, and methods an adversary has available to carry out attacks against a target.

Infrastructure

physical or logical interconnections that the adversary uses to deliver a capability or maintain control of capabilities.

Type 1 Infrastructure

infrastructure controlled or owned by the adversary. 

Type 2 Infrastructure

infrastructure controlled by an intermediary. Sometimes the intermediary might or might not be aware of it.

Service Providers

organizations that provide services considered critical for the adversary availability of Type 1 and Type 2 Infrastructures, for example, Internet Service Providers, domain registrars, and webmail providers.

social-political

factors that influence social behavior and political systems, often impacting the adversary's strategies and operations.