# Technical Aspects of Cyber Kill Chain

arXiv: https://arxiv.org/abs/1606.03184 · HTML: https://mlsanity.com/paper/1606.03184/

## Key facts

- Cited by 7 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 10 Jun 2016.

## Built on by (most cited first, 7 of 7)

- [TREC: APT Tactic / Technique Recognition via Few-Shot Provenance Subgraph Learning](https://mlsanity.com/paper/2402.15147/) (2024)
- [Machine Learning Based Cyber Attacks Targeting on Controlled Information: A Survey](https://mlsanity.com/paper/2102.07969/) (2021)
- [Inducing Personality in LLM-Based Honeypot Agents: Measuring the Effect on Human-Like Agenda Generation](https://mlsanity.com/paper/2503.19752/) (2025)
- [A Heterogeneous Graph Learning Model for Cyber-Attack Detection](https://mlsanity.com/paper/2112.08986/) (2021)
- [Reproducing Random Forest Efficacy in Detecting Port Scanning](https://mlsanity.com/paper/2302.09317/) (2023)
- [Design and implementation of intelligent packet filtering in IoT microcontroller-based devices](https://mlsanity.com/paper/2305.19214/) (2023)
- [A Factored MDP Approach To Moving Target Defense With Dynamic Threat Modeling and Cost Efficiency](https://mlsanity.com/paper/2408.08934/) (2024)

## Abstract (arXiv)

Recent trends in targeted cyber-attacks has increased the interest of research in the field of cyber security. Such attacks have massive disruptive effects on rganizations, enterprises and governments. Cyber kill chain is a model to describe cyber-attacks so as to develop incident response and analysis capabilities. Cyber kill chain in simple terms is an attack chain, the path that an intruder takes to penetrate information systems over time to execute an attack on the target. This paper broadly categories the methodologies, techniques and tools involved in cyber-attacks. This paper intends to help a cyber security researcher to realize the options available to an attacker at every stage of a cyber-attack.