Category

Cyber Threat Intelligence

Cloud Security Built with ATT&CK

Threats to cloud computing span multiple security domains, objectives, and layers of technology. Defenders must protect dynamic, shared environments while adversaries actively exploit misconfigurations, weak controls, and gaps between responsibility boundaries. To keep up, security cannot just focus …

Continue reading

Threat-Informed Defense for Cloud Security

Use our latest mappings to replace assumption-driven cloud defense with evidence-based decisions to stop cloud adversaries in their tracks. With this latest research, you will turn cloud security from a checklist exercise into a threat-informed discipline grounded in real attacks.

Continue reading

INFORM Your Defense

MITRE INFORM is a program-level assessment designed to show how threat-informed your organization is and where to improve next across cyber threat intelligence, defensive measures, and test and evaluation. Turn insight into action and see your threat-informed posture at a glance and know exactly …

Continue reading

Attack Flow v3

With Attack Flow, you will capture the entire attack and communicate what matters!

Continue reading

Secure AI with Threat-Informed Defense

The Center for Threat-Informed Defense applies a threat-informed approach to AI security that enables rapid exchange of new threat information, develops approaches to emulating those threats, and provides comprehensive and effective mitigation strategies.

Continue reading

Breaking Down Silos With Threat-Informed Defense

Jon Baker’s interview discussing how organizations can align SOC, Red Teams and Intel Units at recent RSAC conference.

Continue reading

Threat Modeling Series

A 4-part video series where we teamed up with Adam Shostack, a leading expert in threat modeling and author of ‘Threat Modeling: Designing for Security’ to explore the 4 fundamental questions of threat modeling that every defender should ask. Episode 1: What Are We Working On? Episode 2: …

Continue reading

RSAC Virtual Seminar: How to Create a Threat Modeling Process and use ATT&CK

Practical threat modeling experience is often centered in a single organization, and the fish doesn’t see the ocean. Learn from experts serving hundreds of organizations how ATT&CK provides an empirically grounded model that’s been successfully applied across commercial and government customers.

Continue reading

Secure AI Webinar

Christina Liaghati, MITRE ATLAS Lead, and Jonathan Baker, Center for Threat-Informed Defense Director, discuss taking a threat-informed approach to securing AI-enabled systems. Learn more about using MITRE ATLAS as a framework for understanding threats to AI-enabled systems, our AI Incident Sharing …

Continue reading

Secure AI Webinar

Christina Liaghati, MITRE ATLAS Lead, and Jonathan Baker, Center for Threat-Informed Defense Director, discuss taking a threat-informed approach to securing AI-enabled systems. Learn more about using MITRE ATLAS as a framework for understanding threats to AI-enabled systems, our AI Incident Sharing …

Continue reading