Explore MITRE Shield, a new active defense knowledge base, in this 26-minute conference talk from RSA Conference. Gain insights from MITRE Corporation's Christina Fowler and William Hill as they unpack foundational techniques for deception and adversary engagement. Learn how to leverage the Shield knowledge base for strategy setting and implementation, discover useful resources for both beginners and advanced practitioners, and understand the relationship between MITRE Shield and ATT&CK. Delve into topics such as defensive adversary engagement, the Shield Matrix, ATT&CK mapping, and practical use cases for basic detection and adversary engagement. Acquire valuable knowledge to enhance your organization's active defense capabilities and stay ahead in the cybersecurity landscape.
Overview
Syllabus
Intro
RSAC 365 Virtual Series
Active Defense greatly improves defenses Shield introduces the way forward
Setting the stage for Shield
Defensive Adversary Engagement without engagement, the adversary has uncontested advantage
What does Defensive Adversary
MITRE Shield contains Active Defense building blocks
Shield Website Matrix View
Shield Website - ATT&CK Mapping
Shield's ATT&CK Mapping
Opportunity Spaces
Use Cases
Techniques
The Shield Matrix
Using Shield for Basic Detection
Using Shield for Adversary Engagement
Next Steps in Active Defense and Adversary Engagement
Taught by
RSA Conference
