Appendix C: References and Further Reading¶
This appendix consolidates every external source cited across the Handbook's five parts, grouped by category for quick lookup.
Standards and Frameworks¶
- MITRE ATT&CK
- MITRE ATT&CK Design and Philosophy / Data and Tools
- MITRE ATT&CK Version History
- MITRE ATT&CK Tactic TA0001: Initial Access
- MITRE ATT&CK Tactic TA0005: Defense Evasion
- MITRE ATT&CK Tactic TA0006: Credential Access
- MITRE ATT&CK Tactic TA0009: Collection
- MITRE ATT&CK Tactic TA0040: Impact
- MITRE ATT&CK Tactic TA0043: Reconnaissance
- MITRE ATT&CK Technique T1078: Valid Accounts
- MITRE ATT&CK Technique T1195: Supply Chain Compromise
- MITRE ATT&CK Technique T1195.002: Compromise Software Supply Chain
- MITRE ATT&CK Technique T1552.004: Private Keys
- MITRE ATT&CK Technique T1566: Phishing
- MITRE ATT&CK Technique T1584: Compromise Infrastructure
- MITRE ATT&CK Technique T1584.001: Compromise Infrastructure - Domains
- MITRE AADAPT project site
- MITRE AADAPT GitHub repository
- MITRE AADAPT fact sheet: Cyber Threat Framework for Digital Assets
- NIST glossary: Tactics, Techniques, and Procedures (SP 800-150)
- OWASP Smart Contract Security (SCS)
- OWASP Smart Contract Security Verification Standard (SCSVS)
- OWASP Smart Contract Weakness Enumeration (SCWE)
- OWASP Smart Contract Top 10
- OWASP Web3 Attack Vectors Top 15
- OWASP SCS Contributing Guide
- EIP-712: Typed Structured Data Hashing and Signing
- EIP-2612: Permit Extension for EIP-20 Signed Approvals
- Microsoft Learn: Threat Modeling Tool threat categories
Incidents and Case Studies¶
- X (Twitter) post-incident update blog
- Wikipedia: Bybit
- Wikipedia: Pig butchering scam
- BBC News
- BleepingComputer: Trust Wallet confirms extension hack led to $7 million crypto theft
- CISA Advisory AA22-108A
- Chainalysis: Bybit exchange hack, February 2025 crypto security and DPRK analysis
- Chainalysis: Crypto drainers report
- CoinDesk: Harvest Finance incident coverage
- Gemini Cryptopedia: The DAO Hack
- Group-IB: Inferno Drainer
- FBI IC3 Public Service Announcement PSA 250226
- Ledger: Letter from Chairman/CEO Pascal Gauthier regarding the Ledger Connect Kit exploit
- NCC Group: In-depth technical analysis of the Bybit hack
- OpenSSF blog: XZ Utils backdoor coverage
- Parity blog: 2017 multisig wallet incident
- Reuters: Coincheck hack coverage, January 2018
- Sygnia: Investigation into the Bybit hack
- Wired: Mt. Gox bitcoin exchange collapse, 2014
Tools and Documentation¶
- CycloneDX
- Sigstore: Cosign signing overview
- DeFiHackLabs GitHub repository
- Physical Bitcoin Attacks tracker
- Scam Sniffer
- SPDX
- ICANN: Registration Data Access Protocol (RDAP)
- Security Alliance (SEAL)
- SEAL 911
- Businesswire: Security Alliance (SEAL) launches free crypto-native ISAC