Скачать или смотреть Measure What Matters: How to Use ATT&CK to Do the Right Things in the Right Order – January 2021

Daniel Wyleczuk-Stern, Senior Security Engineer, Snowflake

From the MITRE ATT&CKcon Power Hour held on January 14, 2021

Daniel collects wine and cats. To fund his addictions, he currently works at Snowflake where he helps secure all the things. Prior to that, he was at Praetorian helping keep companies secure and at the US Air Force making things up as he went.

About this presentation:
Cyber security is inherently a function of risk management. Risk management is the identification, evaluation, and prioritization of risks followed by the effort to reduce those risks in a coordinated and economical manner (thanks wikipedia!). In this talk, Daniel will be going over some strategies for measuring and prioritizing your cyber risks using MITRE ATT&CK ®. He'll discuss some lessons learned in atomic testing of techniques vs attack chaining as well as what to measure and how to make decisions with that data.