14. Which of the following threat actors would most likely target an organization by using a logic bomb within an internally-developed application?
Answer: B
Trusted insiders are the most likely threat actors to deploy a logic bomb within an internally-developed application.
Trusted insiders possess the necessary access and knowledge of an organization’s systems, making them the most likely candidates to introduce a logic bomb. Their familiarity with internal applications allows them to embed malicious code without raising immediate suspicion.
A) Nation-state
While nation-state actors often target organizations for espionage or disruption, they typically employ more sophisticated methods and resources than a logic bomb within an internally-developed application. Their focus is usually on larger-scale operations rather than exploiting internal applications developed by the organization itself.
B) Trusted insider
Trusted insiders are uniquely positioned to utilize logic bombs because they have legitimate access to the organization's systems and applications. Their ability to manipulate internal code allows them to embed a logic bomb that can trigger under specific conditions, causing harm without the need for external access.
C) Organized crime group
Organized crime groups primarily seek financial gain through methods such as ransomware or theft of sensitive data. While they may employ various tactics, they do not typically utilize logic bombs in internally-developed applications, as their operations are more focused on direct financial exploitation.
D) Hacktivist
Hacktivists aim to promote political or social agendas through disruptive actions, often targeting large public entities rather than internal applications. Their methods usually involve public displays of protest, such as website defacements, rather than the subtle deployment of logic bombs within an organization’s software.
Conclusion
The rationale for selecting trusted insiders as the correct answer lies in their unique ability to access and manipulate internal applications directly. Other options, while potentially harmful, do not possess the same level of access or intent to embed a logic bomb specifically within an organization's internal software. Thus, the choice of a trusted insider reflects the most plausible scenario in which a logic bomb could be employed effectively.