{"id":2208,"date":"2021-02-02T04:08:01","date_gmt":"2021-02-02T04:08:01","guid":{"rendered":"http:\/\/72.52.228.46\/~itegriti\/?p=2208"},"modified":"2021-04-12T05:09:41","modified_gmt":"2021-04-12T05:09:41","slug":"mitre-shield-what-you-need-to-know","status":"publish","type":"post","link":"https:\/\/itegriti.com\/kw022024\/2021\/cybersecurity\/mitre-shield-what-you-need-to-know\/","title":{"rendered":"MITRE Shield: What You Need To Know"},"content":{"rendered":"

MITRE Shield<\/a> is an active defense knowledge base developed from the experience MITRE staff gained by implementing the MITRE ATT&CK framework to improve operational planning. Many of the techniques described in the framework are foundational security controls, making MITRE Shield accessible and actionable to all organizations, regardless of size or sophistication.<\/p>\n

MITRE noticed that the adversary actions described in MITRE ATT&CK present opportunities for the defending organizations to counteract. Out of this observation, the necessity to organize these counteractions was born which resulted in the development of MITRE Shield. This effort led to the mapping of Shield techniques to MITRE ATT&CK, enabling defending organizations to develop active defense plans to exploit these opportunities to their advantage.<\/p>\n

Structure and terminology<\/h2>\n

Shield\u2019s goal is to structure the active defense actions to avoid complexity and become a useful tool for every organization. To do so, the Shield is using terminology borrowed from the DOD Dictionary of Military and Associated Terms<\/a> and the United States Government Compendium of Interagency and Associated Terms<\/a>:<\/p>\n

In accordance with the DoD, \u201cactive defense<\/strong> is the employment of limited offensive action and counterattacks to deny a contested area or position to the enemy.\u201d Within Shield, active defense includes a handful of actions, ranging from basic cyber defense to cyber deception and adversary engagement operations. The combination of these defenses allows an organization to counter ongoing attacks and to gather intelligence on adversarial actions to be better prepared in the future.<\/p>\n

Like MITRE ATT&CK, Shield organizes active defense actions into tactics, techniques and procedures (TTPs).<\/p>\n