Learning the Associations of MITRE ATT &amp; CK Adversarial Techniques

Al-Shaer, Rawan; Spring, Jonathan M.; Christou, Eliana

doi:10.1109/cns48642.2020.9162207

Cited by 74 publications

(45 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Após a apresentação de trabalhos relacionadosàs principais categorias de abordagens em segurança cibernética comênfase na arquitetura HDFS, [Saraladevi et al 2015] e [Chu 2020], esta subseção apresentará uma análise,à luz do Framework MITRE ATT&CK [MITRE 2021], com vistas a identificar como cada categoria apresentada anteriormente corresponderia com cada etapa no passo a passo de um ataque cibernético. Conforme [Al-Shaer et al 2020], o framework MITRE oferece um vasto repositório sobre as principais Táticas, Técnicas e Procedimentos (TTP) presentes em um ataque hacker.…”

Section: Comparação Com O Framework Mitre Attandckunclassified

DLPS baseado em Deep Learning: Nova Abordagem para Detecção de Exfiltração em HDFS

Martins

Weigang

García

et al. 2021

Anais Do X Brazilian Workshop on Social Network Analysis and Mining (BraSNAM 2021)

View full text Add to dashboard Cite

Este artigo descreve segurança cibernética aplicada a Mídias Sociais com ênfase no uso de HDFS para armazenamento e processamento de grandes volumes de dados. O objetivo foi desenvolver um framework de DLPS baseado em ML que melhore a precisão na identificação de vazamento de dados em estruturas de HDFS. Assim, identificou-se as principais categorias de abordagens em segurança cibernética, no âmbito de HDFS, em comparação com Framework MITRE ATT&CK. Lacunas de pesquisas foram identificadas, em trabalhos realizados envolvendo DLPS e Machine Learning, oferecendo a necessidade do desenvolvimento de soluções correlacionadas. Um framework baseado em Deep Learning aplicado aos metadados e logs do Hadoop é proposto como solução para melhorar a detecção de exfiltração.

show abstract

Section: Comparação Com O Framework Mitre Attandckunclassified

DLPS baseado em Deep Learning: Nova Abordagem para Detecção de Exfiltração em HDFS

Martins

Weigang

García

et al. 2021

Anais Do X Brazilian Workshop on Social Network Analysis and Mining (BraSNAM 2021)

View full text Add to dashboard Cite

show abstract

“…Additionally, as cyber-attacks increase in volume and sophistication, the state of the art of cybersecurity solutions is still lagging behind [ 11 ]. Firewalls, antivirus software, intrusion detection systems, security operation centers and numerous others information security tools and countermeasures have been focusing on defending organizations by detecting or preventing attack actions.…”

Section: Introductionmentioning

confidence: 99%

“… Techniques : describing the means by which adversaries achieve tactical goals by performing an action. In other words, they address the “how” and, in some cases, the “what” an adversary gains by performing an action [ 11 , 32 ]. There may be many ways, or techniques, to achieve tactical objectives, so there are multiple techniques in each tactic category [ 31 ].…”

Section: Introductionmentioning

confidence: 99%

“… Procedures : attributing the specific implementation the adversary uses for techniques or sub-techniques [ 34 ]. They are being used to describe in-the-wild use of techniques or sub-techniques while exhibiting several additional behaviors in the way they are performed [ 11 , 33 ]. Mitigations : defining the countermeasures that could prevent adversaries from achieving their tactical objectives via the usage of specific techniques.…”

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Assessing MITRE ATT&CK Risk Using a Cyber-Security Culture Framework

Georgiadou

Mouzakitis

Askounis

2021

Sensors

View full text Add to dashboard Cite

The MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) Framework provides a rich and actionable repository of adversarial tactics, techniques, and procedures. Its innovative approach has been broadly welcomed by both vendors and enterprise customers in the industry. Its usage extends from adversary emulation, red teaming, behavioral analytics development to a defensive gap and SOC (Security Operations Center) maturity assessment. While extensive research has been done on analyzing specific attacks or specific organizational culture and human behavior factors leading to such attacks, a holistic view on the association of both is currently missing. In this paper, we present our research results on associating a comprehensive set of organizational and individual culture factors (as described on our developed cyber-security culture framework) with security vulnerabilities mapped to specific adversary behavior and patterns utilizing the MITRE ATT&CK framework. Thus, exploiting MITRE ATT&CK’s possibilities towards a scientific direction that has not yet been explored: security assessment and defensive design, a step prior to its current application domain. The suggested cyber-security culture framework was originally designed to aim at critical infrastructures and, more specifically, the energy sector. Organizations of these domains exhibit a co-existence and strong interaction of the IT (Information Technology) and OT (Operational Technology) networks. As a result, we emphasize our scientific effort on the hybrid MITRE ATT&CK for Enterprise and ICS (Industrial Control Systems) model as a broader and more holistic approach. The results of our research can be utilized in an extensive set of applications, including the efficient organization of security procedures as well as enhancing security readiness evaluation results by providing more insights into imminent threats and security risks.

show abstract

Adversarial Trends in Mobile Communication Systems: From Attack Patterns to Potential Defenses Strategies

Chen¹,

Rao²

2021

Secure IT Systems

View full text Add to dashboard Cite

Learning the Associations of MITRE ATT & CK Adversarial Techniques

Cited by 74 publications

References 9 publications

DLPS baseado em Deep Learning: Nova Abordagem para Detecção de Exfiltração em HDFS

DLPS baseado em Deep Learning: Nova Abordagem para Detecção de Exfiltração em HDFS

Assessing MITRE ATT&CK Risk Using a Cyber-Security Culture Framework

Adversarial Trends in Mobile Communication Systems: From Attack Patterns to Potential Defenses Strategies

Contact Info

Product

Resources

About