Published 25/10/2020 – est. 3 minutes to read.
First of all, why is threat modelling important when implementing programs of change?
Whether it’s a Web Application or a hosting infrastructure project, identifying issues as early in the lifecycle as possible is critically important. Threat modelling is an invaluable tool when used early in the design phase, before any infrastructure or application code is written. With the potential threats and associated risks identified, Security Architects and Software Engineers can address them during development instead of after.
DevOps & Software engineers can also implement compensating controls that reduce the likelihood of a vulnerability being exploited and/or lessen the impact of an exploit.
It is generally understood that shifting security left is an important way to secure workloads and deliver higher-quality services. Threat modelling is yet another tool in the Secure Design toolbox.
What is MITRE?
MITRE ATT&CK® is a globally accessible knowledge base of adversary tactics and techniques based on real-world observations.
The ATT&CK knowledge base serves as a foundation for developing specific threat models and methodologies in the private sector, government, and the cybersecurity product and service community.
The video below provides a great overview:
While there are many ways to use ATT&CK, using it to assess your cyber defence capabilities is one of the most important.
In the framework, there are twelve main areas of tactics and a number of techniques under each of these areas:
ATT&CK Navigator is a great tool to start assessing your current capabilities for defending against different types of attacks, identifying gaps, and adjusting your strategy and roadmap accordingly.
Useful Links
- https://attack.mitre.org
- https://owasp.org/www-community/Application_Threat_Modeling
- https://www.ncsc.gov.uk/collection/cyber-security-design-principles/establish-the-context-before-designing-a-system
- https://csrc.nist.gov/publications/detail/sp/800-154/draft
Find out more
For more information on how we can act as your trusted partner in cybersecurity and help protect what is important to your business, please contact us on 0161 706 0244 or email info@cybersecurityspecialists.co.uk to speak with a member of our expert team today.
Related Pages
