Using Game Theory and ATT&CK to Improve Cybersecurity Strategies

•

3 recomendaciones•1,326 vistas

This presentation shows how the use of game theory with the ATT&CK framework can produce better attack and defense strategies.

Tecnología

W&R G&MES
The Use of Game Theory with the ATT&CK Framework to
Produce Better Attack and Defense Strategies
Matt Summers & Nick Dunn

Introduction
1) Who are we?
2) How did this work begin?
3) What are our aims?:
Identifying critical points in the attack chain in order to distribute resources in
the most effective way

The Work So Far
1) Game Theory and its uses:
Economics
Military strategy
2) Mapping the ATT&CK Framework onto an attack/defence non-cooperative game
3) What we'll be releasing/doing in the future
4) Thank You! - We will be around to take questions

Using Game Theory and ATT&CK to Improve Cybersecurity Strategies

Recomendados

Detecting Trends Through Twitter Stream v2The Night's Watch

ATTACKers Think in Graphs: Building Graphs for Threat IntelligenceMITRE - ATT&CKcon

State of the ATTACKMITRE - ATT&CKcon

ATTACK-Onomics: Attacking the Economics Behind Techniques Used by AdversariesMITRE - ATT&CKcon

Measure What Matters: How to Use MITRE ATTACK to do the Right Things in the R...MITRE - ATT&CKcon

MITRE ATTACKcon Power Hour - JanuaryMITRE - ATT&CKcon

Using ATTACK to Create Cyber DBTS for Nuclear Power PlantsMITRE - ATT&CKcon

Sharpening your Threat-Hunting Program with ATTACK FrameworkMITRE - ATT&CKcon

Helping Small Companies Leverage CTI with an Open Source Threat MappingMITRE - ATT&CKcon

What's New with ATTACK for ICS?MITRE - ATT&CKcon

From Theory to Practice: How My ATTACK Perspectives Have ChangedMITRE - ATT&CKcon

Putting the PRE into ATTACKMITRE - ATT&CKcon

What's a MITRE with your Security?MITRE - ATT&CKcon

ATTACKing the Cloud: Hopping Between the MatricesMITRE - ATT&CKcon

Mapping the EventBot Mobile Banking Trojan with MITRE ATTACK for MobileMITRE - ATT&CKcon

Transforming Adversary Emulation Into a Data Analysis QuestionMITRE - ATT&CKcon

TA505: A Study of High End Big Game Hunting in 2020MITRE - ATT&CKcon

Using MITRE PRE-ATTACK and ATTACK in Cybercrime Education and ResearchMITRE - ATT&CKcon

What's New with ATTACK for Cloud?MITRE - ATT&CKcon

Starting Over with Sub-TechniquesMITRE - ATT&CKcon

MITRE ATTACKCon Power Hour - DecemberMITRE - ATT&CKcon

MITRE ATT&CKcon Power Hour - NovemberMITRE - ATT&CKcon

MITRE ATTACKcon Power Hour - OctoberMITRE - ATT&CKcon

MITRE ATT&CKcon 2.0: Flashback with ATT&CK: Exploring Malware History with AT...MITRE - ATT&CKcon

MITRE ATT&CKcon 2.0: Lessons in Purple Team Testing with MITRE ATT&CK; Daniel...MITRE - ATT&CKcon

MITRE ATT&CKcon 2.0: Prioritizing ATT&CK Informed Defenses the CIS Way; Phili...MITRE - ATT&CKcon

MITRE ATT&CKcon 2.0: Keynote Address - The Friends We Made Along the Way; Ton...MITRE - ATT&CKcon

MITRE ATT&CKcon 2.0: Prioritizing Data Sources for Minimum Viable Detection; ...MITRE - ATT&CKcon

From Event to Action: Accelerate Your Decision Making with Real-Time AutomationSafe Software

Unblocking The Main Thread Solving ANRs and Frozen FramesSinan KOZAK

Más contenido relacionado

Más de MITRE - ATT&CKcon

Helping Small Companies Leverage CTI with an Open Source Threat MappingMITRE - ATT&CKcon

What's New with ATTACK for ICS?MITRE - ATT&CKcon

From Theory to Practice: How My ATTACK Perspectives Have ChangedMITRE - ATT&CKcon

Putting the PRE into ATTACKMITRE - ATT&CKcon

What's a MITRE with your Security?MITRE - ATT&CKcon

ATTACKing the Cloud: Hopping Between the MatricesMITRE - ATT&CKcon

Mapping the EventBot Mobile Banking Trojan with MITRE ATTACK for MobileMITRE - ATT&CKcon

Transforming Adversary Emulation Into a Data Analysis QuestionMITRE - ATT&CKcon

TA505: A Study of High End Big Game Hunting in 2020MITRE - ATT&CKcon

Using MITRE PRE-ATTACK and ATTACK in Cybercrime Education and ResearchMITRE - ATT&CKcon

What's New with ATTACK for Cloud?MITRE - ATT&CKcon

Starting Over with Sub-TechniquesMITRE - ATT&CKcon

MITRE ATTACKCon Power Hour - DecemberMITRE - ATT&CKcon

MITRE ATT&CKcon Power Hour - NovemberMITRE - ATT&CKcon

MITRE ATTACKcon Power Hour - OctoberMITRE - ATT&CKcon

MITRE ATT&CKcon 2.0: Flashback with ATT&CK: Exploring Malware History with AT...MITRE - ATT&CKcon

MITRE ATT&CKcon 2.0: Lessons in Purple Team Testing with MITRE ATT&CK; Daniel...MITRE - ATT&CKcon

MITRE ATT&CKcon 2.0: Prioritizing ATT&CK Informed Defenses the CIS Way; Phili...MITRE - ATT&CKcon

MITRE ATT&CKcon 2.0: Keynote Address - The Friends We Made Along the Way; Ton...MITRE - ATT&CKcon

MITRE ATT&CKcon 2.0: Prioritizing Data Sources for Minimum Viable Detection; ...MITRE - ATT&CKcon

Más de MITRE - ATT&CKcon (20)

Helping Small Companies Leverage CTI with an Open Source Threat Mapping

What's New with ATTACK for ICS?

From Theory to Practice: How My ATTACK Perspectives Have Changed

Putting the PRE into ATTACK

What's a MITRE with your Security?

ATTACKing the Cloud: Hopping Between the Matrices

Mapping the EventBot Mobile Banking Trojan with MITRE ATTACK for Mobile

Transforming Adversary Emulation Into a Data Analysis Question

TA505: A Study of High End Big Game Hunting in 2020

Using MITRE PRE-ATTACK and ATTACK in Cybercrime Education and Research

What's New with ATTACK for Cloud?

Starting Over with Sub-Techniques

MITRE ATTACKCon Power Hour - December

MITRE ATT&CKcon Power Hour - November

MITRE ATTACKcon Power Hour - October

MITRE ATT&CKcon 2.0: Flashback with ATT&CK: Exploring Malware History with AT...

MITRE ATT&CKcon 2.0: Lessons in Purple Team Testing with MITRE ATT&CK; Daniel...

MITRE ATT&CKcon 2.0: Prioritizing ATT&CK Informed Defenses the CIS Way; Phili...

MITRE ATT&CKcon 2.0: Keynote Address - The Friends We Made Along the Way; Ton...

MITRE ATT&CKcon 2.0: Prioritizing Data Sources for Minimum Viable Detection; ...

Último

From Event to Action: Accelerate Your Decision Making with Real-Time AutomationSafe Software

Unblocking The Main Thread Solving ANRs and Frozen FramesSinan KOZAK

The Codex of Business Writing Software for Real-World Solutions 2.pptxMalak Abu Hammad

How to Troubleshoot Apps for the Modern Connected WorkerThousandEyes

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Miguel Araújo

Top 5 Benefits OF Using Muvi Live Paywall For Live StreamsRoshan Dwivedi

Factors to Consider When Choosing Accounts Payable Services Providers.pptxKatpro Technologies

08448380779 Call Girls In Civil Lines Women Seeking MenDelhi Call girls

IAC 2024 - IA Fast Track to Search Focused AI SolutionsEnterprise Knowledge

Presentation on how to chat with PDF using ChatGPT code interpreternaman860154

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...apidays

Finology Group – Insurtech Innovation Award 2024The Digital Insurer

Slack Application Development 101 Slidespraypatel2

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...Igalia

Partners Life - Insurer Innovation Award 2024The Digital Insurer

Data Cloud, More than a CDP by Matt RobisonAnna Loughnan Colquhoun

TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc

GenCyber Cyber Security Day PresentationMichael W. Hawkins

WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure servicePooja Nehwal

Developing An App To Navigate The Roads of BrazilV3cube