Mitre

The MITRE is a nonprofit organization focused on research and development in the areas of defense, national security and information technology.

Founded in 1958, MITRE is a public-private partnership funded by the U.S. government and governed by a board of directors with representation from the public and private sectors. MITRE operates several research and development centers across the United States, including the headquarters in Bedford, Massachusetts.

The MITRE is known for its role in managing the computer vulnerability classification system, known as CVE (Common Vulnerabilities and Exposures), as well as developing cybersecurity and national defense standards. The MITRE also works closely with foreign governments and international organizations to help solve complex security and technology-related problems.

What is the MITRE ATT&CK®?

The MITRE ATT&CK® (Adversarial Tactics, Techniques, and Common Knowledge) is an open source framework that describes the tactics, techniques, and procedures (TTPs) used by cybercriminals in computer attacks. It is designed to help IT security professionals better understand the methods used by attackers and improve their ability to detect, prevent and respond to security incidents.

The MITRE ATT&CK® consists of a matrix that describes the different phases of an attack, including tactics (the attacker's overall goals), techniques (specific methods used to achieve those goals), and procedures (specific steps taken to execute a technique). Users can use the matrix to identify the TTPs most commonly used by attackers and to assess their own ability to detect and prevent these attacks.

The MITRE ATT&CK® has become a standard tool for IT security professionals, security researchers and government agencies. It is also used for developing IT security solutions and training security incident response teams.

What is the purpose of the ATT&CK Matrix tool?

The MITRE ATT&CK Matrix is a framework for understanding the tactics, techniques and procedures (TTPs) used by attackers in cyber attacks. The ATT&CK Matrix describes the various stages of an attack, from the initialization stage to the attacker's final objective.

The ATT&CK Matrix tool serves several purposes. First, it can help IT security teams understand the potential threats and risks they face. Using the ATT&CK Matrix, security teams can assess their ability to detect and respond to attacks based on the TTPs most commonly used by attackers.

The ATT&CK Matrix tool can also be used for computer security training and education. Security professionals can use the ATT&CK Matrix to teach their team how to identify and mitigate the risks associated with TTPs used by attackers.

Finally, the ATT&CK matrix is also used by developers of computer security tools to design products and solutions that are effective in detecting and preventing TTPs commonly used by attackers.

MITRE ATT&CK Matrix - copyright @ MITRE