The topic of cyber adversary characterization is indeed a vast one, with many avenues of which one can venture and many caveats down which one can fall. As we become increasingly reliant upon technology for the day-to-day running of our countries, businesses and lives, this problem will continue to grow, our attack surfaces will increase and with it, the need to understand where the real threats lay and what the true nature of those threats really are.

Throughout this publication, we have introduced a set of principals, methodologies, metrics and how to manage the vast amount of data all of which have been designed to give structure to the process of characterizing cyber adversaries and determining specific threats to specific assets.

The theories presented in this book were conceived in the hope that they will aid in solving the growing problems which large corporations, government agencies and private users of information technology all face on a daily basis. With the growing use of information systems, the cost of managing the security of those systems will only increase, heightening the importance of understanding where the highest risk threats lay and how to manage those threats in an effective and cost efficient manner.

To this end, efforts to research new characterization methodologies and theories continue. Using the theory established thus far to form a firm foundation; we seek to document and discuss emerging issues surrounding the topic of cyber adversary characterization, analyzing how the established theory can be used to provide practicable solutions...