66 min listen
SWVHSC: Mapping MITRE ATT&CK to PCI DSS - Jeff Man - ESW #193
SWVHSC: Mapping MITRE ATT&CK to PCI DSS - Jeff Man - ESW #193
ratings:
Length:
76 minutes
Released:
Aug 7, 2020
Format:
Podcast episode
Description
MITRE ATT&CK seems to be the “next big thing”. Every time I hear about it I can’t help but wonder, “how do you prevent all these attacks in the first place? Shouldn’t that be the end game?” To that end, I set out to map all the recommended “Mitigations” for all the “Techniques” detailed in ATT&CK to see how many are already addressed by what is required in the Payment Card Industry Data Security Standard (PCI DSS). My hypothesis was all of them. The results were interesting and a little surprising, and I’m still trying to figure out how to best use the results and subsequently ATT&CK itself. I will present my findings in the briefing and hopefully generate a discussion about what to do with the results. Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw193
Released:
Aug 7, 2020
Format:
Podcast episode
Titles in the series (100)
Drunken Security News - Episode 340: All things Black Hat, DefCon. Making $15,000 to $20,000 per hour. Hijacking a Prius. Vulnerable printers. More SCADA hacking. Hacking toilets. by Security Weekly Podcast Network (Video)