So, I climbed to the top of the pyramid of pain -- now what?

TL;DR

This paper introduces the Human Layer Kill Chain framework, integrating human psychology into cybersecurity analysis to better understand AI-enabled adversarial tactics and improve organizational resilience.

Contribution

It presents the Human Layer Kill Chain and Sociotechnical Kill Plane frameworks, advancing traditional models by incorporating human factors and AI influences into threat analysis.

Findings

The framework models eight stages of human-centric attack processes.

AI techniques are shown to enhance psychological manipulation in cyber attacks.

The approach supports non-technical personnel in threat detection and response.

Abstract

This paper explores the evolving dynamics of cybersecurity in the age of advanced AI, from the perspective of the introduced Human Layer Kill Chain framework. As traditional attack models like Lockheed Martin's Cyber Kill Chain become inadequate in addressing human vulnerabilities exploited by modern adversaries, the Humal Layer Kill Chain offers a nuanced approach that integrates human psychology and behaviour into the analysis of cyber threats. We detail the eight stages of the Human Layer Kill Chain, illustrating how AI-enabled techniques can enhance psychological manipulation in attacks. By merging the Human Layer with the Cyber Kill Chain, we propose a Sociotechnical Kill Plane that allows for a holistic examination of attackers' tactics, techniques, and procedures (TTPs) across the sociotechnical landscape. This framework not only aids cybersecurity professionals in understanding adversarial methods, but also empowers non-technical personnel to engage in threat identification and response. The implications for incident response and organizational resilience are significant, particularly as AI continues to shape the threat landscape.