Discuss the Target data breach of 2013. It was the first major data breach to receive truly substantial media coverage and not have that coverage die off immediately after (as with most other breaches before and since). It also brought the Lockheed-Martin Cyber Attack Kill Chain model into the common cybersecurity lexicon. Required reading is listed below.

Being able to present and summarize the key concepts of a complex cybersecurity incident in a short time frame is an important skill to master. Remember that unless you are talking to other cybersecurity professionals, probably no one thinks this stuff is as interesting as you do.

Instructions: The main purpose of the discussion assignments is to get you to dig into the main four cybersecurity frameworks and references we use in the class. Use the context of the specific security incident to explore and explain some aspects of the NIST CSF, the CIS CSCs, ACSC Strategies to Mitigate Cyber Incidents, and the MITRE ATT&CK matrix.

Keep each discussion sub-topic focused..

The format for this discussion will be as follows:

(1) Quickly summarise the key aspects of the data breach.

(2) NIST CSF reflection.

(3) CIS CSCs reflection.

(4) ACSC Strategies to Mitigate Cyber Incidents reflection.

(5) MITRE ATT&CK reflection.

REFERENCES

Committee on Commerce, Science, and Transportation. (2014). A Target 2013 “kill chain” analysis of the 2013 Target data breach. Washington, DC: U.S. Senate. Retrieved from https://www.commerce.senate.gov/services/files/24d3c229-4f2f-405d-b8db-a3a67f183883

Shu, X., Tian, K., Ciambrone, A., & Yao, D. (2017). Breaking the Target: An analysis of Target data breach and lessons learned. Ithaca, NY: arXiv, Cornell University. Retrieved from https://arxiv.org/pdf/1701.04940.pdf