Types of attacks. Attacks to the Industry domain can be categorized in different ways, depending on the aspects considered. Two aspects are considered in this section because they are key factors for the selection and implementation of countermeasures. When the effect of attacks is considered, two main categories can be identified: Information Theft: a.k.a. “data exfiltration”, its final aim is to violate the confidentiality of information. Usually, attacks motivated by Cyber-espionage, hacktivism, etc. fall in this category. Destructive attack: its final aim is to violate the integrity of information and systems. Usually, attacks of cyberwarfare, cyberterrorism or industrial unfair competition such as Stuxnet, German steel plant attack, attacks against industrial control systems, fall in this category61. Among Destructive attacks, two subcategories can be considered, depending on the kind of assets they aim to destroy: ◦ Physical assets, i.e. attacks targeting physical systems run by the target organisation ◦ Informational assets, i.e. attacks aiming at destroying information owned by the target organisation In turn, when the attack duration is considered, attacks can be partitioned in two different categories: Cyber Assaults, i.e. quick attacks carried out in a short timeframe and with a well- defined purpose (e.g. defacement of a website), the attacks from Anonymous are a clear example. 61 For further details on the mentioned category refer to the link xxxx://xxx.xxxxxxxxxx.xxx/vinfo/us/security/news/cyber-attacks/german-steel-plant-suffers-significant- damage-from-targeted-attack
