When Everything Is Critical, Nothing Is: ISA and Mitigation Prioritization
summary
MITRE’s Infrastructure Susceptibility Analysis (ISA) prioritizes fixes by combining threat intelligence (ATT&CK v13, known TTPs and exploited CVEs) with engineering impact and asset criticality to answer which attack paths adversaries are most likely and capable to use. ISA weights demonstrated capabilities higher than conjecture, scores motivation/opportunity, and outputs a ranked mitigation list (examples: changing default controller credentials first, then integrity checks for project files). The method aims to reduce attacker advantage and increase operational resilience rather than chase every CVE.
AI-written summary · about
chapters (11)
- 0:00Introduction and setup
- 1:27The vulnerability overload problem
- 6:25Defensive inefficiencies in cybersecurity
- 9:38Moving left of boom in defense
- 12:27Risk calculation challenges
- 15:58Introducing Infrastructure Susceptibility Analysis
- 18:13Asset criticality in industrial systems
- 23:36Steps to perform ISA
- 37:17Using ISA to prioritize fixes
- 41:12Next steps after ISA
- 44:27Resources and Q&A
related talks
43mThe Art of Vulnerability Management - Practical Application of Cyber Triage
27mGet Your Security Priorities Straight! How to Identify Workloads Und...
40mHow CISA Is Charting a Path Toward Defensible Infrastructure
32mResilient Secure Software Development Through Insights Learned from Adversarial Attack Campaigns- 43mThe Art of Vulnerability Management - Practical Application of Cyber Triage
27mSolving CISO Headaches: How to Align CTI and Risk Management
01h 11m2024 Security BSides // Adam Pennington
39mOrganizational Context Matters: Security Control Effectiveness on Vulnerabilities for Prioritization