MITRE ATT&CK

Mitre ATT&CK Framework: A boon to your company’s Red Team

The MITRE ATT&CK Framework has become increasingly popular over the last few years. It was originally developed to support Mitre’s cyberdefense work but at this point it is both an enormous knowledge base of cyberattack technology and tactics and a model for understanding how those elements are used together to penetrate a target’s defenses. The ATT&CK acronym stands for Adversarial Tactics, Techniques, and Common Knowledge.

The goal of it is to segregate common types of cyber attacks within one group, making it easier for attack analysis to find the source of your attack by comparing and contrasting technique. The attacks are classified in the form of a matrix. The matrix has 5 levels which are as follow:

  1. Description
  2. Platform and data sources
  3. Examples
  4. Mitigation
  5. Detection

Each cyber attack campaign is described step wise with all the 5 above points.

Cyber attacks are getting more and more complex over the last few years. So it’s wise to raise the cyber security levels to theirs in order to stay safe and protected. With ATT&CK, it’s easier to track attacks and figure common patterns to see how the malware has evolved over the years.

Building a red team in your company can gauge the effectiveness of the defense tools you have in your organization. Red teams are unique for every organization. An expert should be asked for help to do a comprehensive red team exercise to test the cyber vulnerabilities of your organization.

Benefits of red teaming exercise:

  1. Validate protection and monitoring around high value sensitive systems.
  2. Confidence in the system ability to sustain attack and incident response.
  3. A full scale cyber-attack including, phishing, network, malware, ransomware and physical attack tested with the latest trends in the security landscape.

While internal red teams are a great asset, this is a high skill function and high skilled resources are hard to retain. Logix Infosecurity provides the service and its cyber security tools as well as DLP tools are at par with latest industry standards. Ransomware is a big threat and the industry must prepare its IT systems in advance for the cyber-criminal activities are rising in India.

Leave a Reply

Your email address will not be published. Required fields are marked *