One Article Review
| Source |  taosecurity |
|---|---|
| Identifiant | 1992755 |
| Date de publication | 2020-10-23 10:12:50 (vue: 2020-10-23 14:14:16) |
| Titre | MITRE ATT&CK Tactics Are Not Tactics |
| Texte |  Just what are "tactics"?IntroductionMITRE ATT&CK is a great resource, but something about it has bothered me since I first heard about it several years ago. It's a minor point, but I wanted to document it in case it confuses anyone else.The MITRE ATT&CK Design and Philosophy document from March 2020 says the following:At a high-level, ATT&CK is a behavioral model that consists of the following core components:• Tactics, denoting short-term, tactical adversary goals during an attack;• Techniques, describing the means by which adversaries achieve tactical goals;• Sub-techniques, describing more specific means by which adversaries achieve tactical goals at a lower level than techniques; and• Documented adversary usage of techniques, their procedures, and other metadata.My concern is with MITRE's definition of "tactics" as "short-term, tactical adversary goals during an attack," which is oddly recursive.The key word in the tactics definition is goals. According to MITRE, "tactics" are "goals."Examples of ATT&CK TacticsATT&CK lists the following as "Enterprise Tactics": MITRE ATT&CK "Tactics," https://attack.mitre.org/tactics/enterprise/Looking at this list, the first 11 items could indeed be seen as goals. The last item, Impact, is not a goal. That item is an artifact of trying to shoehorn more information into the ATT&CK structure. That's not my primary concern though.Military Theory and DefinitionsAs a service academy graduate who had to sit through many lectures on military theory, and who participated in small unit exercises, the idea of tactics as "goals" does not make any sense. |
| Envoyé | Oui |
| Condensat | how however it that this 10th 17th 2000s 2003 2020 5120 :mitre about academy according achieve across added adversaries adversary advertising again ages ago air aircraft; all along also although and• anomaly any anyone anywhere apply approach are argument armed arms army arrangement array art article artifact associated association att&ck att&ck is att&ck attack attack;• attacks author battle battles became because been behavioral bejtlich big blogspot book bothered britannica business but byzantine capabilities case century change chipping civilian cjcsm clear coaches com combat; common components:• compromise concepts concern concerned conclusionin confuses consists content copyright core could creveld crossing cycling day dealt decisions defender defense defines definition definitionsas denoting depend derived describing design designed designing developing dictionary did different digital disciplines disposing disposition disuse document documented dod does doesn don doric doubt drawing drew during each early edition efforts else email emperor emphasis emphasizes employment encyclopaedist encyclopedia end enemy engagements english enter enterprise entirely entrenched entry european example examples excellent execution exercises experience fell fight fighting first fixated fixation fly following following: following:at forces form formations friedman from future give given goal goals goals:this goals;• graduate grass great greek greek strategos greek: gtp guide had handbook happen harris harvard has have heard high his historian hockey hot how https://attack ice idea impact important incident includes including indeed indicators information introductionmitre involve isn item items john just key kind land language last leader leaders lectures led leo level like likewise list lists lower made make manage many march marketing martin matter mean meaning means men mentions metadata methods middle might military militarysome minor mitre model month more movements much non none not number objective objectives oddly offer only opposing optimization order ordered org/tactics/enterprise/looking organizes originates origins other over overlapping participated perhaps personalities; perspective philosophy phrase picture plural point primary procedures procedures; proposed providing puck readers really reappeared recognize recognized recursive references relation required resource resources responders review richard roots said says scholar science sea security see seen sense service several share ships shoehorn short show shows since sit small social soldiers something space specific stratagos; strategoi strategus strategy structure sub succinctly supervision surprised tactic tactica tactical tactics tacticsatt&ck taosecurity taxis team techniques techniques; term terminology terms defines than that them theory these think though three through tool top toward trade troops trying ttps under unit usage use used uses van various victory wall want wanted warfare ways weapons website well what when which who will wise word world would written wrote www xenophon years your στραταγός στρατηγοί; στρατηγός “tacticks” |
| Tags | Guideline |
| Stories | |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.