Feed on
Posts
Comments

Monthly Archive for October, 2022

Back in 2018 I wrote about MITRE Att@ck, as I spelled it then, and how it lets you reuse a very thorough analysis of how attackers actually work. Four years later it has become the common language of the whole industry, so a short summary is in order. MITRE ATT&CK is a knowledge base of […]

Read Full Post »

In my previous post I described how MITRE ATT&CK is used technically. Here is why I think it is just as useful for management. Security decisions are hard because they are so abstract. A vendor says their product is the best, the security team says they need more budget, and management has no real way […]

Read Full Post »