ATT&CKers Think In Graphs – January 2021

Описание: Valentine Mairet, Security Researcher, McAfee
From the MITRE ATT&CKcon Power Hour held on January 14, 2021

Valentine joined the McAfee ATR team in May 2020 as a security researcher. With experience in both red and blue teaming, she uses her acquired skills to analyze and evaluate threat intelligence and build graphical representations that change the way we approach problems. Valentine is a speaker at industry conferences on topics ranging from Kubernetes to offensive security. She is also chairwoman of the WICCA foundation, an educational community for women in cybersecurity based in the Netherlands. Besides computers, Valentine likes to write fantasy and play Dungeons and Dragons.

About this presentation:
The MITRE ATT&CK ® framework is the industry standard to dissect cyberattacks into used techniques. At McAfee, all attack information is disseminated into different categories, including ATT&CK techniques. What results from this exercise is an extensive repository of techniques used in cyberattacks that goes back many years. Much can be learned from looking at historical attack data, but how can we piece all this information together to identify new relationships between threats and attacks? In her recent efforts, Valentine has embraced analyzing ATT&CK data in graphical representations. One lesson learned is that it is not just about merely mapping out attacks and techniques used into graphs, but the strength lies in applying different algorithms to answer specific questions. In this presentation, Valentine will showcase the results and techniques obtained from her research journey using graph and graph algorithms.