MITRE needs contributions for ICS ATT&CK to boost emulation quality

August 14, 2024
1 min read

TLDR

  • MITRE is seeking intelligence contributions for ICS ATT&CK evaluations to enhance emulation in industrial control systems.
  • Round 2 of evaluations will focus on insider threat activity within the ICS/OT domain.

Non-profit organization MITRE is calling for contributions to enhance its emulation approach for industrial control systems (ICS) ATT&CK evaluations. The focus of Round 2 evaluations will be on insider threat activity within the ICS/OT domain, to evaluate product capabilities against behaviors inspired by insider attacks. MITRE is looking for tactics, techniques, and procedures used by malicious insiders, technology and assets targeted by insider threats, and other relevant information. Contributors are required to follow specific steps for sharing information, including emailing MITRE at a designated address. MITRE also offers contributors the option to choose how they would like to be credited for their contributions. The organization aims to release more content throughout the year to enhance actionable defensive measures for practitioners in the domain.

Enhancing ICS Emulation with Insider Threat Activity

MITRE is seeking contributions from the community to enrich its emulation approach for industrial control systems (ICS) ATT&CK evaluations, focusing on insider threat activity within the ICS/OT domain. The organization is looking for information about tactics, techniques, and procedures used by malicious insiders, assets targeted by insider threats, and any other relevant information that can aid in addressing this type of threat.

Contributions and Credit

Contributors interested in sharing information for the evaluations must follow specific steps outlined by MITRE, including emailing their contributions to a designated address. The organization gives contributors the freedom to choose how they would like to be credited for their contributions. MITRE is committed to releasing more content throughout the year to enhance defensive measures for practitioners in the domain.

Latest from Blog

Top 20 Linux Admin Tools for 2024

TLDR: Top Linux Admin Tools in 2024 Key points: Linux admin tools streamline system configurations, performance monitoring, and security management. Popular Linux admin tools include Webmin, Puppet, Zabbix, Nagios, and Ansible. Summary

Bogus job tempts aerospace, energy workers

TLDR: A North Korean cyberespionage group is posing as job recruiters to target employees in aerospace and energy sectors. Mandiant reports that the group uses fake job descriptions stored in malicious archives