一种数据驱动的方法来优先考虑MITRE ATT&CK技术用于主动目录对手模拟.
Alshaimaa Abo-Alian1, Mahmoud Youssef2, Nagwa L Badr1
1Faculty of Computer and Information Sciences, Ain Shams University, Cairo, Egypt.
Scientific reports
|July 30, 2025
概括
本研究引入了一种新方法,用于在Active Directory环境中优先考虑网络对手技术. 它使用多标准决策,专注于高影响力的威胁,改进网络安全防御.
科学领域:
- 网络安全 网络安全
- 信息安全 信息安全
- 计算机科学 计算机科学
背景情况:
- 先进的持久性威胁 (APT) 对Active Directory (AD) 安全构成不断变化的挑战.
- 对手模拟对于评估安全至关重要,但缺乏结构化的优先级.
- 现有的框架在有效模拟的资源配置方面扎.
研究的目的:
- 开发一个结构化的方法来优先考虑对手模拟技术.
- 提高在AD环境中针对APT的安全控制的有效性.
- 为了使对手模拟与现实世界的攻击场景保持一致.
主要方法:
- 一种多标准决策 (MCDM) 方法,集成运营威胁情报 (OTI) 和MITRE ATT&CK数据.
- 基于Active Directory影响,威胁评分和安全控制差距的技术评估.
- 基于值的权重用于客观的,数据驱动的优先级.
主要成果:
- 一个经过验证的框架,用于系统地优先考虑对手技术.
- 通过使用APT3威胁组的案例研究证明了有效性.
- 识别用于集中模拟的高影响和难以检测的技术.
结论:
- 拟议的MCDM框架显著提高了对手模拟的有效性.
- 它通过专注于关键威胁来加强Active Directory环境中的安全态度.
- 为优化网络安全资源配置提供数据驱动的方法.
相关概念视频
01:19Masking and Demasking Agents
2.7K
EDTA titrations may necessitate masking and demasking agents to temporarily protect a particular metal ion in a mixture from the EDTA reaction. These agents facilitate the sequential analysis of the metal ions by forming stable complexes with some—but not all—metal ions during certain steps.
There are many masking agents, such as cyanide, fluoride, triethanolamine, thiourea, and 2,3-bis(sulfanyl)propan-1-ol (formerly 2,3-dimercapto-1-propanol), with the masking agent chosen based on...
There are many masking agents, such as cyanide, fluoride, triethanolamine, thiourea, and 2,3-bis(sulfanyl)propan-1-ol (formerly 2,3-dimercapto-1-propanol), with the masking agent chosen based on...
2.7K
01:18Guidelines and Strategies for Safe Computer Charting
877
The guidelines and strategies provided by the American Nurses Association (ANA) and the Canadian Nurses Association (CNA) offer essential principles for ensuring safe and secure computer charting systems in healthcare settings. Let's break down each recommendation:
Maintain Confidentiality and Security:
Maintain Confidentiality and Security:
877
00:53Olefin Metathesis Polymerization: Acyclic Diene Metathesis (ADMET)
2.0K
Acyclic diene metathesis polymerization or ADMET polymerization involves cross-metathesis of terminal dienes, such as 1,8-nonadiene, to give linear unsaturated polymer and ethylene. As ADMET is a reversible process, the formed ethylene gas must be removed from the reaction mixture to complete the polymerization process.
Similar to cross-metathesis, ADMET also involves the formation of metallacyclobutane intermediate by [2+2] cycloaddition of one of the double bonds of a terminal diene with...
Similar to cross-metathesis, ADMET also involves the formation of metallacyclobutane intermediate by [2+2] cycloaddition of one of the double bonds of a terminal diene with...
2.0K