Detection: Challenging Paradigms

Episode 37: Steve Luke and Roman Daszczyszak

9 snips
Dec 22, 2023
MITRE's Center for Threat Informed Defense (CTID) members discuss Summiting the Pyramid project, analyzing adversary behaviors in cyber, trade-offs in attack analysis, making analytics robust, evasion and false positives in detection, balance between precision and recall, and encouraging user feedback.
Ask episode
Chapters
Transcript
Episode notes
1
Introduction
00:00 • 2min
2
Applying knowledge of adversary behaviors in cyber
01:59 • 18min
3
Trade-offs in Analyzing Adversarial Attacks
19:32 • 17min
4
Analytic Robustness and Resilience
37:00 • 26min
5
Evasion, Exclusion Clauses, and False Positives in Detection
01:02:40 • 4min
6
Trade-off between Precision and Recall in the Classic Rock Curve
01:07:00 • 3min
7
Encouraging the use of 'somebody in the pyramid' system and user feedback
01:10:03 • 2min