Attack Scenarios: How to Get There from Here    Larry Rogers
Security and Survivability  This article was originally
published in News at SEI on: December 1, 2001  If your goal is
to attack a computer system, it is extremely useful to know all
the attack scenarios available to you. If your goal is to defend
a computer system, then knowing which vulnerabilities appear in
the most attack scenarios helps you to defeat the wily intruders
more effectively than by simply fixing each vulnerability that
comes to light. If your goal is to search for and describe
vulnerabilities, then using a consistent language is crucial to
documenting your results.  Remember Star Trek’s transporter
mechanism? “Beam me up, Scotty” allowed Jim Kirk, Spock, and
their friends to be transported from one place to another
instantaneously. Well, that is science fiction, but it is an
analogy that is useful in describing how computer systems’
vulnerabilities are exploited.  First, recall that in Star Trek,
Spock and Kirk had to be somewhere