Adam Shostack :donor: :unverified: on Nostr: For Threat Model Thursday, let’s look at Threat Modeling with ATT&CK from MITRE. As ...
For Threat Model Thursday, let’s look at Threat Modeling with ATT&CK from MITRE. As always with Threat Model Thursday, my goal is to respectfully engage with interesting work and ask what we can learn from it. This one is particularly interesting because I’ve been teaching threat modeling with kill chains, including ATT&CK, for many years.
First, it’s incredibly nice to see an overview graphic, and nice to see another system that adpots the Four Question Framework, and has a condensed view up front of what you need to know.
(1/6 or read the blog https://shostack.org/blog/mitre-attack-threat-modeling-threat-model-thursday/)
First, it’s incredibly nice to see an overview graphic, and nice to see another system that adpots the Four Question Framework, and has a condensed view up front of what you need to know.
(1/6 or read the blog https://shostack.org/blog/mitre-attack-threat-modeling-threat-model-thursday/)