The scenario describes an attacker compromising one computer to use it as a base for attacking other systems. This initial compromised machine serves as a launch point or "stepping stone." This technique allows the attacker to obscure their true origin, making it harder to trace the attack back to them. The primary purpose of compromising this first machine is not to harm it directly but to leverage its resources and network position for a broader campaign.

A. Denial of availability: This is a type of attack outcome (e.g., DDoS), which might be launched from the compromised machine, but it is not the purpose of the initial compromise itself.

B. Data export: This refers to data exfiltration. The scenario's focus is on using the machine to attack others, not on stealing data from the initial victim.

C. Data modification: This involves altering data to compromise its integrity. The described purpose is to use the computer as a tool, not to modify its data.

---

1. National Institute of Standards and Technology (NIST)

Special Publication 800-61 Rev. 2

Computer Security Incident Handling Guide

August 2012.

Section 2.3.2

Attack Vectors

discusses how attackers compromise hosts to use them as platforms for launching attacks against other targets. This establishes the concept of using a compromised system as a launch point.

2. He

T.

& Wu

S. F. (2007). A Survey of Stepping-Stone Detection Techniques. IEEE Communications Surveys & Tutorials

9(1)

73-87.

Abstract & Section I. Introduction: This peer-reviewed article explicitly defines the methodology: "Attackers often launch attacks through a chain of intermediate hosts

called stepping-stones

to hide their identity and location." This directly corresponds to the "launch point" concept.

DOI: https://doi.org/10.1109/COMST.2007.358974

3. MIT OpenCourseWare

6.858 Computer Systems Security

Fall 2014.

Lecture 1: Introduction & Threat Models: The lecture materials discuss the typical lifecycle of an attack

which includes establishing an initial foothold (compromising a machine) and then using that access to pivot or launch further attacks within a network or against external targets. This compromised host acts as the launch point for subsequent phases.