Assessing MITRE ATT&CK Risk Using a Cyber-Security Culture Framework.

ABSTRACT: The MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) Framework provides a rich and actionable repository of adversarial tactics, techniques, and procedures. Its innovative approach has been broadly welcomed by both vendors and enterprise customers in the industry. Its usage extends from adversary emulation, red teaming, behavioral analytics development to a defensive gap and SOC (Security Operations Center) maturity assessment. While extensive research has been done on analyzing specific attacks or specific organizational culture and human behavior factors leading to such attacks, a holistic view on the association of both is currently missing. In this paper, we present our research results on associating a comprehensive set of organizational and individual culture fact

SUBMITTER: Georgiadou A 

PROVIDER: S-EPMC8125987 | biostudies-literature | 2021 May

REPOSITORIES: biostudies-literature