Cybersecurity Science with Shawn Riley

I. Introduction A. Background on Cybersecurity Threats Cybersecurity threats are an ongoing concern for organizations of all sizes and across all industries. As technology continues to evolve and become more integral to business operations, the threat landscape also becomes more complex and sophisticated. Cyber attackers are constantly seeking new ways to exploit vulnerabilities and gain unauthorized access to sensitive data and systems. The consequences of a successful cyber attack can be severe, including financial losses, reputational damage, and legal consequences. Therefore, it is critical for organizations to have effective cybersecurity strategies in place to identify and mitigate potential threats. B. Definition of Attack Path Scenarios Attack Path Scenarios are a type of threat scenario used in cybersecurity to show the step-by-step sequence of tactics, techniques, and procedures (TTPs) that a cyber attacker may use to penetrate a system, gain access to sensitive data, and ach...

Introduction In today's world, technology plays an integral role in businesses' success. However, with technological advancements comes the risk of cyber-attacks, making it essential for businesses to prioritize their cybersecurity. Misconfigurations, which refer to errors or incorrect settings made in system configurations, are common vulnerabilities that can lead to data breaches, loss of business, and legal penalties. Identifying these security-relevant misconfigurations is crucial for businesses to mitigate risks, but it can be challenging, especially in complex IT environments. This paper will explore how businesses can identify security-relevant misconfigurations and the challenges involved. Additionally, we will discuss how TTP-level cyber threat susceptibility assessments using MITRE ATT&CK can help businesses identify and prioritize these vulnerabilities. How Do We Know What Misconfigurations Are Security Relevant? Misconfigurations can occur at various levels of t...

I. Introduction Over the last decade, the cybersecurity industry has predominantly relied on quantitative analysis of historical data to measure and manage cyber risk. While this approach is useful in understanding past trends and patterns in cyber attacks, it may not provide an accurate reflection of the current threat landscape. The Digital Cyber Twin (DCT) approach offers a unique and innovative solution to support ongoing cyber risk assessment and decision-making by focusing on the present state rather than historical data. Through the use of automation, machine reasoning, and the scientific method, the DCT approach provides a more accurate and up-to-date view of an organization's security posture. By continuously collecting and analyzing various types of data, the DCT approach allows for the identification of emerging threats and the implementation of mitigation strategies. This approach is different from traditional quantitative analysis that focuses on historical data and ma...