MITRE ATT&CK™: Design and Philosophy - Mitre Corporation

MP180360. MI TR E P R O D U C T. MITRE ATT&CK : Design and Philosophy Project No.: 01 ADM105-PI. The views, opinions and/or findings contained in this report are those of The MITRE Corporation and should not be construed as an official government position, policy, or decision, unless designated by other documentation. Approved for Public Release. Distribution unlimited 18-0944-11. 2018 The MITRE Corporation . All rights reserved. McLean, VA. Authors: Blake E. Strom Andy Applebaum Doug P. Miller Kathryn C. Nickels Adam G. Pennington Cody B. Thomas July 2018. Abstract The MITRE ATT&CK knowledgebase describes cyber adversary behavior and provides a common taxonomy for both offense and defense. It has become a useful tool across many cyber security disciplines to convey threat intelligence, perform testing through red teaming or adversary emulation, and improve network and system defenses against intrusions. The process MITRE used to create ATT&CK, and the Philosophy that has developed for curating new content, are critical aspects of the work and are useful for other efforts that strive to create similar adversary models and information repositories.

Executive Summary This paper discusses the motivation behind the creation of ATT&CK, the components described ... roadmap to develop new ways of performing actions that may not be detected by common ... what parts of its enterprise lack defenses and/or visibility. These gaps represent blind spots for

Tags:

  Enterprise, Summary, Executive, Roadmap, Executive summary

Information