Structured
Threats
Structured threats are often far more serious and
potentially damaging to an organization than unstructured threats. These threats
are characterized by directed and specific attempts to do harm, gather
information, and, disrupt business and operations. Those engaged in structure
threats are often erudite assailants with detailed knowledge of network
functionality and application logic. Furthermore, the attackers are often
motivated by achieving a specific outcome such as fraud, theft, or industry- or
state-sponsored intelligence gathering and may focus on specific targets.
Oftentimes, the perpetrators of structured threats are those creating the tools
and scripts used by script kiddies in unstructured threats.
Structured threats can be challenging to security
administrators who may not understand their network infrastructure and systems
as well as the attacker. While there are far fewer individuals engaged in
structured threats than unstructured threats, it is arguable that these few are
the most dangerous elements.