ATT&CK Yourself: Using Discrete Adversary TTPs to Make Your Network and Systems More Defendable

No ratings

Presented at BSidesSpringfield 2017 by

Jason Holcomb

Penetration testing and vulnerability assessment have their place but could there be a security testing technique that provides greater value? In this presentation, we will introduce and explore MITRE’s ATT&CK framework in the context of building discrete test cases around specific attacker Tactics, Techniques, and Procedures (TTP). We will then look at how this type of testing can provide valuable insight into weaknesses in your current defensive posture from monitoring and detection to blocking and response.