A 4-part video series where we teamed up with Adam Shostack, a leading expert in threat modeling and author of ‘Threat Modeling: Designing for Security’ to explore the 4 fundamental questions of threat modeling that every defender should ask. Episode 1: What Are We Working On? Episode 2: …
Practical threat modeling experience is often centered in a single organization, and the fish doesn’t see the ocean. Learn from experts serving hundreds of organizations how ATT&CK provides an empirically grounded model that’s been successfully applied across commercial and government customers.
Christina Liaghati, MITRE ATLAS Lead, and Jonathan Baker, Center for Threat-Informed Defense Director, discuss taking a threat-informed approach to securing AI-enabled systems. Learn more about using MITRE ATLAS as a framework for understanding threats to AI-enabled systems, our AI Incident Sharing …
Christina Liaghati, MITRE ATLAS Lead, and Jonathan Baker, Center for Threat-Informed Defense Director, discuss taking a threat-informed approach to securing AI-enabled systems. Learn more about using MITRE ATLAS as a framework for understanding threats to AI-enabled systems, our AI Incident Sharing …
A collaboration with MITRE ATLAS™ to advance security for AI–enabled systems that takes a threat-informed approach, enables rapid exchange of new threat information, and provides mitigation strategies.
Describing adversarial behaviors in the form of tactics, techniques, and procedures (TTPs) using MITRE ATT&CK® revolutionized detection and response. Focusing on TTPs creates an opportunity for high-fidelity detection of adversaries. If we can detect a behavior, the adversary will need to change …
Know your adversary’s next move with the Technique Inference Engine, a machine learning-powered tool that infers unseen adversary techniques, providing security teams actionable intelligence.
Threat Modeling with ATT&CK defines how to integrate MITRE ATT&CK® into your organization’s existing threat modeling methodology. This process is intended for universal application to any system or technology stack (large or small) using existing threat modeling methodologies like STRIDE, …
Cybersecurity teams use threat modeling as a critical component of defensive cyber operations to understand and reduce threats to their systems and environments. To stay up to date on various threats, teams rely on cyber threat intelligence (CTI) reporting.
This project provides cybersecurity defenders and researchers with critical insight into real-world adversary behaviors mapped to ATT&CK. The ecosystem fundamentally advances the collective ability to see threat activity across organizational, platform, vendor, and geographical boundaries. …
