Attack Vector
An attack vector is a concrete mechanism or path by which an attacker achieves access, data exfiltration, or unauthorized actions. The concept enables systematic threat analysis, risk assessment, and prioritization of countermeasures across architecture, processes, and implementation. It is central to threat modelling and security decision making.
Use this profile to understand the building block briefly, place it in the model, and switch to the 360° assessment when needed.
Theoretical construct: explains a term, principle, or mental model.
What organizes, connects, or makes decisions possible.
Why is this building block relevant?
- An attack vector denotes the specific path or entry point an adversary uses to compromise a system.
- It is used to classify threats and to prioritize defensive measures.
Position in the model
Where this building block is located in the topic model.
No structure path available.
Connections
These building blocks help you place this topic: what it strengthens, what it influences, and which technologies or methods connect to it.
Additional classification
This classification shows where the building block typically matters, how demanding it is, and what kind of impact it has in the model.
The level within the organization (enterprise, domain, team) at which the AssetBlock is applied.
Organizational maturity indicates at which level (enterprise, domain, team) the AssetBlock can be applied most effectively.
The impact area indicates which domains (technical, business, organizational) are affected by introducing and using the AssetBlock.
Decision type describes which kinds of decisions (design, architectural, organizational, technical) are affected by applying the AssetBlock.
The phase in the value stream (discovery, build, run, iterate) in which the AssetBlock is primarily used.
Complexity describes the level of difficulty in implementing and using the AssetBlock. It considers factors such as the number of involved components, their interactions, and required skills.
Maturity describes how established, stable, and practice-proven an AssetBlock is in real-world usage. It considers market adoption, experience, and available best practices.
Cognitive load indicates how much mental effort and knowledge is required to effectively understand and apply the AssetBlock. It considers conceptual complexity, required expertise depth, and learning curve.