After a new control is deployed, the adversary begins attacking at a different time of day and against a less protected system. Which SP 800-30 concept describes this behaviour?

Question

Answer 1

Show the answer

Answer: C. Threat shifting

Threat shifting is the response of adversaries to perceived safeguards, in which they change characteristics of intent or targeting — in time, target, resource or attack method domains — to avoid or overcome those controls.

Source: NIST SP 800-30 Rev. 1 (NIST) — Sec. 2.3.1 Risk Models — Threats