Adequately modeling any and every possible scenario is ineffective and haphazard at best. Hoping that you have chosen the most pressing attack vectors to model will not work in the modern day of threat tactics.<\/span><\/li>\n<\/ul>\n<\/span><\/p>\nRecommendations<\/strong><\/h2>\nKey Points<\/strong><\/em><\/h3>\n\n- Precision is critical to being able to successfully defend against threats.<\/strong><\/span><\/span><\/span><\/span><\/span><\/span><\/li>\n
- Traditional threat modeling such as STRIDE or PASTA is based on a spray-and-pray approach to identifying your next potential threat vector. Instead, take a structured risk-based approach to understanding both an attacker\u2019s tactics and how they may be used against your enterprise. Threat preparedness requires precision, not guesswork.<\/span><\/span><\/span><\/li>\n
- Knowing is half the battle.<\/strong><\/span><\/li>\n
- You may be doing better than you think. Undoubtedly, there is a large surface area to cover with threat modeling. By preparing beforehand, you can separate what\u2019s important from what\u2019s not and identify which attack vectors are the most pressing for your business.<\/span><\/li>\n
- Be realistic and measured.<\/strong><\/strong><\/span><\/li>\n
- Do not try to remediate everything. Some attack vectors and approaches are nearly impossible to account for. Take control of the areas that have reasonable mitigation methods and act on those.<\/span><\/li>\n
- Identify blind spots.<\/strong><\/strong><\/span><\/li>\n
- Understand what is out there and how other enterprises are being attacked and breached. See how you stack up to the myriad of attack tactics that have been used in real-life breaches and how prepared you are. Know what you\u2019re ready for and what you\u2019re not ready for.<\/span><\/li>\n
- Analyze the most pressing vectors.<\/strong><\/strong><\/span><\/li>\n
- Prioritize the attack vectors that are relevant to you. If an attack vector is an area of concern for your business, start there. Do not cover the entire tactics list if certain areas are not relevant.<\/span><\/li>\n
- Detection and mitigation lead to better remediation.<\/strong><\/strong><\/span><\/li>\n
- For each relevant tactic and techniques, there are actionable detection and mitigation methods to add to your list of remediation efforts.<\/span><\/li>\n<\/ul>\n
Approach<\/strong><\/em><\/h3>\n<\/span><\/p>\nUsing the MITRE ATT&CK\u00ae<\/sup> framework, the approach helps you understand your preparedness and effective detection and mitigation actions.<\/p>\n\n- Learn about potential attack vectors and the techniques that hostile actors will use to breach and maintain a presence on your network.<\/span><\/span><\/span><\/span><\/span><\/span><\/li>\n
- Analyze your current protocols versus the impact of an attack technique on your network.<\/span><\/span><\/span><\/li>\n
- Discover detection and mitigation actions.<\/span><\/li>\n
- Create a prioritized series of security considerations, with basic actionable remediation items. Plan your next threat model by knowing what you\u2019re vulnerable to.<\/span><\/li>\n
- Ensure business data cannot be leaked or stolen.<\/span><\/li>\n
- Maintain privacy of data and other information.<\/span><\/li>\n
- Secure the network connection points.<\/span><\/li>\n
- Mitigate risks with the appropriate services.<\/span><\/li>\n<\/ul>\n
This blueprint and associated tool are scalable for all types of organizations within various industry sectors, allowing them to know what types of risk they are facing and what security services are recommended to mitigate those risks.<\/p>\n
Methodology and Tools<\/strong><\/h2>\nExecutive Brief<\/strong><\/h3>\nRead our concise Executive Brief to find out why threat preparedness is a crucial first step in defending your network against any attack type. Review the methodology and understand the ways we can support you in completing this project.<\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n\n- Threat Preparedness Using MITRE ATT&CK\u00ae \u2013 Executive Brief<\/span><\/span><\/span><\/strong><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/strong><\/span><\/li>\n
- Threat Preparedness Using MITRE ATT&CK\u00ae \u2013 Phases 1-3<\/span><\/span><\/span><\/strong><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/strong><\/span><\/li>\n<\/ul>\n
1. Attack tactics and techniques<\/span><\/span><\/span><\/span><\/span><\/span><\/strong><\/h3>\nReview a breakdown of each of the various attack vectors and their techniques for additional context and insight into the most prevalent attack tactics.<\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n\n- Threat Preparedness Using MITRE ATT&CK\u00ae \u2013 Phase 1: Attack Tactics and Techniques<\/span><\/span><\/span><\/strong><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/strong><\/span><\/li>\n<\/ul>\n
2. Threat Preparedness Workbook mapping<\/span><\/span><\/span><\/span><\/span><\/span><\/strong><\/h3>\nMap your current security protocols against the impacts of various techniques on your network to determine your risk preparedness.<\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n\n- Threat Preparedness Using MITRE ATT&CK\u00ae \u2013 Phase 2: Threat Preparedness Workbook Mapping<\/span><\/span><\/span><\/strong><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/strong><\/span><\/li>\n
- Enterprise Threat Preparedness Workbook<\/span><\/span><\/span><\/strong><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/strong><\/span><\/li>\n<\/ul>\n
3. Execute remediation and detective measures<\/span><\/span><\/span><\/span><\/span><\/span><\/strong><\/h3>\nUse your prioritized attack vectors to plan your next threat modeling session with confidence that the most pressing security concerns are being addressed with substantive remediation actions.<\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n