Threat Modeling With ATT&CK

July 24, 2024

Project Summary

Threat Modeling with ATT&CK defines how to integrate MITRE ATT&CK® into your organization’s existing threat modeling methodology. This process is intended for universal application to any system or technology stack (large or small) using existing threat modeling methodologies like STRIDE, PASTA, or Attack Trees. To demonstrate its use and applicability to a wide audience of cybersecurity practitioners, we apply this process to a fictional internet-of-things (IOT) system called the Ankle Monitoring Predictor of Stroke (AMPS).

Problem

There is a lack of guidance on how to best utilize ATT&CK to improve existing threat modeling practices.

Solution

Develop a process to integrate ATT&CK into existing threat modeling methodologies that will enable companies to identify critical assets, assess threats to these assets, measure existing defensive capabilities, and recommend mitigations.