March 2023

Attack Flow Project: Collaborative R&D that’s Changing the Game

A Q&A discussion with Mark Alba, Chief Product Officer, Anomali, Cindy Goodwin-Sak, Anomali and Jon Baker, Director, MITRE Engenuity Center for Threat-Informed Defense, moderated by Rajiv Raghunarayan, Senior Vice President of Product Marketing, Anomali. We’ll discuss the evolution of the Center for Threat-Informed Defense and the Attack Flow Project, Anomali’s role in the project, and provide a use case.

Mapping Attack Patterns to Detect Threats

To move forward, we often reflect on the past. It’s no different in cybersecurity.  Take, for instance, threat detection. In the early days of the internet, recognition entailed when a “threat” indicated a payload embedded with an indiscriminate worm that produced an irritating message or an awkward gif. 

As threats increased in intricacy, so did detection capabilities. Starting with event monitoring, which necessitated analysts to sift through the noise for evidence that could potentially lead to the attacker. 

A new approach to detecting threats is rising, one that leverages advancements to find threats by incessantly tracking the bad guys and their patterns, providing real-time visibility into risk – including before and after an attack.

Attack Flow: Laying the Foundation for Predictive Intelligence

As a community, we can realize the dream of predictive intel. Learning from past incidents enables us to accelerate threat hunting. Using events correlated to MITRE ATT&CK® helps intel teams with attribution. We have created the puzzle pieces through the Center for Threat-Informed Defense’s R&D program. Now it’s time to assemble them as a community and truly enable predictive intelligence.