Slaying Dragons Together...
summary
Describes how multidisciplinary teams at MITRE convert decade-long deception research into reusable community resources: the ATT&CK knowledge base (originating from earlier deception work) and the Engage matrix built from vendor focus groups and structured goal→objective→approach design, revealed publicly at RSA 2018 after 10 years in silence. Lists the actual tools and processes used—custom forensic and encrypted‑channel inspection tools, deception traps, the open-source Caldera platform now NSF‑backed—and notes community adoption and ongoing maintenance experiments.
AI-written summary · about
chapters (11)
- 0:00Introduction and panel overview
- 2:31Power of community in security
- 7:06MITER ATT&CK framework origins
- 10:57MITER Engage deception framework
- 17:14Building collaborative frameworks
- 27:42Cross-industry community approaches
- 33:02Developing models and frameworks
- 35:52Building your own ecosystem
- 37:17Collaborative success stories
- 40:08Threat-informed crime prevention
- 42:39Recommended books and call to action
related talks
40mA Primer: Getting Started with MITRE Shield
46mDeception Is on the Rise, But Is It Time to Unleash Engagement Operations?
20mDynamic Defense: Crafting threat models with real-world Intelligence
34mMITRE Attack Flow: Laying Foundations for Predictive Intelligence
58mMITRE ATT&CK for Developers
26mA Primer: Getting Started with MITRE Shield
48mMITRE ATT&CK: The Play at Home Edition
46mApplied Deception Beyond the Honeypot: Moving Past 101