Loading content
An attack vector is a concrete mechanism or path by which an attacker achieves access, data exfiltration, or unauthorized actions. The concept enables systematic threat analysis, risk assessment, and prioritization of countermeasures across architecture, processes, and implementation. It is central to threat modelling and security decision making.
Use this profile to understand the building block briefly, place it in the model, and switch to the 360° assessment when needed.
Theoretical construct: explains a term, principle, or mental model.
What organizes, connects, or makes decisions possible.
An attack vector is the concrete route through which an attack reaches and exploits a system. The concept helps classify threats and prioritize defenses by entry path and impact.
The term comes from computer security, where defenders need to describe not only harm but the concrete route into a system. An attack vector therefore names the path, method, or scenario of a breach and helps separate entry point, weakness, and exploitation step in analysis. Knowledge bases such as MITRE ATT&CK make these routes comparable across real-world techniques.
Think of an attack chain as a route on a map: the attack surface marks all reachable points, the attack vector is the route actually chosen, an exploit turns a vulnerability into unauthorized action, and a countermeasure interrupts the route at one or more points. Threat modeling traces that route to show where prevention, hardening, or detection will have the most effect.
All exposed interfaces, components, and processes through which an attack can start.
An exploitable weakness that makes an attack possible or easier.
A technique or piece of software that turns a weakness into unauthorized action.
A targeted action that blocks, limits, or reveals an attack path.
A structured method for identifying likely attack paths and ordering defenses.
The term is useful in architecture reviews, threat modeling, incident analysis, and prioritizing security controls. It helps narrow many possible risks down to the most relevant entry paths. A single attack vector is not a full risk assessment: it says little about likelihood, impact, or existing controls, and it can change with context.
Where this building block is located in the topic model.
No structure path available.
Explore how this building block connects to concepts, methods, technologies, and tools.
These sources establish the term and its professional meaning.
All direct connections of the current building block in a compact text view.
This classification shows where the building block typically matters, how demanding it is, and what kind of impact it has in the model.
The level within the organization (enterprise, domain, team) at which the AssetBlock is applied.