# Enhancing Cybersecurity Through Comprehensive Investigation of Data Flow-Based Attack Scenarios
## 3 Proposed Approach
### Methodology
#### 3.2.3 Impact Enumeration  
The threat impact enumeration plays a crucial role in systematic attack elicitation, making it valuable for cyber-threat modeling studies and CPS security assessment. The list also helps cybersecurity researchers and professionals to understand and analyze the different types of attacks prevalent in the cybersecurity landscape. In this step, we classify potential cyberattacks based on their characteristics and attributes as detailed in the STRIDE threat list. The origin of each category is provided in Table 1. The output of this step illustrates the diverse categories of attacks; an example is presented below. By grouping attacks into categories, it becomes easier to develop effective countermeasures and defense strategies against them. * **Impersonation:** A type of cyberattack in which an attacker gains unauthorized access to a system or network by impersonating a legitimate user or device. This type of attack involves stealing or spoofing users, exploiting vulnerabilities in software or hardware, or using social engineering approaches to lead the system into accepting them as a trusted entity. * **Crash:** A type of cyberattack that aims to disrupt or disable a system by causing it to crash or become unavailable. This type of attack typically involves sending malformed input or other unexpected data to a system or application, leading to unpredictable behavior that can cause a crash. * **Data flow sniffing:** A type of cyberattack where an adversary intercepts and monitors data flowing between different components or subsystems of the system to capture and analyze sensitive information such as passwords, login credentials, or other confidential data transmitted over the network. * **Cross-site request forgery (CSRF):** This cyberattack exploits a system's trust by tricking users into sending a malicious request from a legitimate user system. The system executes the request without verifying its authenticity, allowing the attacker to take control of the system. This can result in various malicious actions, such as unauthorized data access, system setting manipulation, or even physical damage to the system. * **Changing program execution flows:** A type of cyberattack that modifies the regular sequence of instructions executed by a computer program. Through this attack, the attacker can manipulate the program's execution flow to cause unintended actions, typically including unauthorized access to resources, data modification or deletion, or execution of arbitrary code. * **Data repudiation:** A type of cyberattack in which an attacker manipulates or alters system data to deny responsibility or accountability for the actions associated with those data. This type of attack involves unauthorized access to the system and alteration of system logs or data records, making it difficult or impossible to trace the attack source or determine the actual state of the system. * **Information not intended for disclosure (data breach/privacy leakage):** A type of cyberattack in which an unauthorized individual gains access to a system or network and steals sensitive information such as personal data, financial records, or intellectual property. The aim of this attack is to steal or leak data for the purpose of financial gain, identity theft, espionage, or other illegal activities. * **Data flow interruption:** A type of cyberattack in which an attacker intentionally disrupts the normal flow of data and either interferes with the transmission or reception of data between system components or disrupts the communication channels that facilitate the exchange of information. * **Remote code execution:** A type of cyberattack where an attacker gains unauthorized access to a system, then injects and remotely executes malicious code or commands on the target system. * **Unauthorized access/unauthorized intrusion:** A type of cyberattack where an attacker gains entry or acquires privileged access to an application, network, or device without proper authorization or permission.