生成潜在威胁主体列表

Below are five likely threat actors targeting a smart city data exchange platform, with their motivations, common techniques, and primary risks.

1. Nation-state/APT groups

• Motivation: Strategic intelligence, disruption of critical services, influence operations.
• Techniques: Supply-chain compromise (signed update abuse), zero-day exploitation, credential theft and SSO abuse, living-off-the-land, covert C2, targeting OT/ICS protocols (e.g., MQTT, Modbus gateways).
• Risks: City-wide service disruption (traffic, utilities), long-term data exfiltration, integrity attacks on sensor data, safety impacts.

2. Ransomware and organized cybercrime syndicates

• Motivation: Financial gain via extortion, data theft and resale.
• Techniques: Phishing and initial access brokers, exploitation of vulnerable edge gateways/APIs, lateral movement to data lakes and backup systems, double/triple extortion, DDoS-for-ransom.
• Risks: Platform downtime, loss of operational data and backups, exposure of sensitive PII/PCI/PHI, service-level breaches and regulatory penalties.

3. Malicious or negligent insiders (employees, contractors, MSPs)

• Motivation: Financial gain, coercion, grievance; or inadvertent mistakes.
• Techniques: Credential misuse, privilege escalation, unauthorized API calls, data exfiltration via cloud storage or removable media, risky configuration changes, shadow IT.
• Risks: High-impact data leakage, unauthorized data sharing across agencies, integrity loss through configuration drift, bypass of monitoring and segregation controls.

4. Hacktivists and ideologically motivated groups

• Motivation: Protest, reputational damage, policy influence.
• Techniques: Application-layer DDoS against APIs, mass scraping and data dumps, web defacement, exploitation of misconfigurations, data poisoning to undermine trust in public dashboards.
• Risks: Service outages, public mistrust due to manipulated metrics, exposure of non-public datasets, reputational harm.

5. Compromised or adversarial ecosystem partners (vendors and data-sharing entities)

• Motivation: Opportunistic abuse, monetization of access, or being a pivot for other actors.
• Techniques: CI/CD and package repository compromise, dependency confusion in platform components, malicious SDKs, OAuth token theft, over-privileged third-party API integrations.
• Risks: Trusted-channel abuse for code execution or data exfiltration, widespread propagation via update mechanisms, systemic compromise across agencies connected to the exchange platform.

以下为医疗电子病历（EHR）系统的5类潜在威胁主体：

1. 网络犯罪团伙/勒索软件运营者

• 动机：经济利益（勒索、数据出售）。
• 常见手法：钓鱼邮件、漏洞利用（未打补丁的应用/VPN/网关）、凭证填充、横向移动、数据外传与加密。
• 影响：系统不可用、患者数据泄露、运营中断与合规风险。

2. 国家级或高级持续性威胁（APT）

• 动机：情报收集（大规模健康数据、科研与医药知识产权）。
• 常见手法：供应链渗透、零日漏洞、长期隐蔽驻留、特权提升、加密通道的数据渗漏。
• 影响：持久性数据窃取、对关键研究与临床流程的系统性风险。

3. 内部人员（员工/承包商）

• 动机：恶意行为、经济利益、报复或权限滥用；也包括疏忽与误操作。
• 常见手法：未授权访问或批量导出病历、绕过访问控制、使用个人设备/未加密介质、共享账户。
• 影响：精准、难以察觉的数据泄露；审计与责任追踪复杂化。

4. 第三方供应商/集成商（供应链）

• 动机/风险来源：合作方系统被攻陷、更新渠道被投毒、远程维护账号滥用。
• 常见手法：通过接口与集成（HL7/FHIR、PACS、HIE、云备份）进行入侵，API密钥管理不当、证书泄露。
• 影响：跨系统传播、信任边界被绕过、合规与合同义务风险。

5. 医疗欺诈团伙/数据经纪灰产

• 动机：医疗身份盗用、医保骗保、敏感数据交易。
• 常见手法：撞库与账号接管（患者门户、医护自助系统）、暗网购买凭证、社会工程获取核验信息。
• 影响：患者财务与隐私损害、监管处罚、品牌与信任受损。