{"id":7409,"date":"2021-07-02T13:31:30","date_gmt":"2021-07-02T13:31:30","guid":{"rendered":"https:\/\/outofsite.biz\/cynance\/?p=7409"},"modified":"2021-07-02T13:36:26","modified_gmt":"2021-07-02T13:36:26","slug":"security-stack-mappings-for-azure-research-project","status":"publish","type":"post","link":"https:\/\/outofsite.biz\/cynance\/security-stack-mappings-for-azure-research-project\/","title":{"rendered":"Security Stack Mappings for Azure Research Project"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"7409\" class=\"elementor elementor-7409\">\n\t\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-45e0897e elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"45e0897e\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2a13f229\" data-id=\"2a13f229\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-264884f6 elementor-widget elementor-widget-text-editor\" data-id=\"264884f6\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.11.5 - 14-03-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#818a91;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p><span style=\"font-weight: 400;\">IT security teams face a constant battle to keep on top of the security controls provided by their core suppliers. They are required to show how a move to this platform, operating system or cloud will enhance their organisation\u2019s security, and why.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">The <\/span><a href=\"https:\/\/www.microsoft.com\/security\/blog\/2021\/06\/29\/mitre-attck-mappings-released-for-built-in-azure-security-controls\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Security Stack Mappings for Azure research project<\/span><\/a><span style=\"font-weight: 400;\"> from Microsoft and <\/span><a href=\"https:\/\/mitre-engenuity.org\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">MITRE-Engenuity<\/span><\/a><span style=\"font-weight: 400;\"> is designed to help improve the information available for IT security teams.<\/span><\/p><h2><span style=\"font-weight: 400;\">What is the Security Stack Mappings for Azure research project?<\/span><\/h2><p><span style=\"font-weight: 400;\">The Security Stack Mappings research project is devised by MITRE-Engenuity, the organisation behind the <\/span><a href=\"https:\/\/attack.mitre.org\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">MITRE ATT&amp;CK framework<\/span><\/a><span style=\"font-weight: 400;\">. ATT&amp;CK stands for Adversarial Tactics, Techniques, and Common Knowledge, and the framework is a comprehensive record of the different techniques used by cyber attackers.\u00a0<\/span><\/p><p><span style=\"word-spacing: normal;\">The MITRE ATT&amp;CK framework is used by threat hunters, red teamers, and defenders to assess an organisation\u2019s risk against the threats they may face.<\/span><\/p><p><span style=\"font-weight: 400;\">The Security Stack Mappings for Azure research project aims to improve the data available for organisations which explains how a platform\u2019s in-built security controls support them against the specific adversary tactics, techniques, and procedures (TTPs) that they are working to protect their organisations against.<\/span><\/p><p><span style=\"font-weight: 400;\">Put simply, the Security Stack Mappings for Azure research project has mapped <\/span><a href=\"https:\/\/center-for-threat-informed-defense.github.io\/security-stack-mappings\/Azure\/README.html#controls\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">48 security controls<\/span><\/a><span style=\"font-weight: 400;\"> contained in the Microsoft Azure cloud platform against one or more of the threat techniques listed in the MITRE ATT&amp;CK framework.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">The project has created a library of mappings that provides detailed information about the protection provided by these controls against the TTPs that organisations may face.<\/span><\/p><h2><span style=\"font-weight: 400;\">How the security controls were mapped<\/span><\/h2><p><span style=\"font-weight: 400;\">In order to carry out the mapping exercise, the <\/span><a href=\"https:\/\/ctid.mitre-engenuity.org\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Center for Threat-Informed Defense<\/span><\/a><span style=\"font-weight: 400;\"> (CTID) run by MITRE-Engenuity worked with Microsoft Azure to create a fresh methodology that would reach their desired outcomes. The five step methodology included:<\/span><\/p><p><b>Step 1: Identify platform security controls<\/b><span style=\"font-weight: 400;\"> &#8211; identify the set of security controls available on Azure for analysis.<\/span><\/p><p><b>Step 2: Security control review<\/b><span style=\"font-weight: 400;\"> &#8211; review each security control\u2019s documentation, and identify the set of ATT&amp;CK (sub-)techniques that it mitigates.<\/span><\/p><p><b>Step 3: Identify mappable ATT&amp;CK (sub-)techniques<\/b><span style=\"font-weight: 400;\"> &#8211; use the information gathered above to map the security control against the set of ATT&amp;CK (sub-)techniques it mitigates.\u00a0<\/span><\/p><p><b>Step 4: Produce score assessments<\/b><span style=\"font-weight: 400;\"> &#8211; security controls were assessed against the<\/span><a href=\"https:\/\/github.com\/center-for-threat-informed-defense\/security-stack-mappings\/blob\/main\/docs\/scoring.md\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\"> scoring criteria<\/span><\/a><span style=\"font-weight: 400;\">. The scoring rubric took into account three key areas:<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Function &#8211; is the security control intended to protect, detect, or respond to an adversary behaviour.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Effectiveness &#8211; each security control\u2019s effectiveness was scored against criteria for its function, and rated as minimal, partial, or significant.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Additional factors &#8211; coverage, temporal (real-time, periodic, or externally triggered), and accuracy.<\/span><\/li><\/ul><p><b>Step 5: Create mapping files<\/b><span style=\"font-weight: 400;\"> &#8211; every mapped control is placed in a <\/span><a href=\"https:\/\/github.com\/center-for-threat-informed-defense\/security-stack-mappings\/blob\/main\/docs\/mapping_format.md\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">mapping file<\/span><\/a><span style=\"font-weight: 400;\"> which records all the data gathered throughout the project.<\/span><\/p><div id=\"attachment_7438\" style=\"width: 710px\" class=\"wp-caption aligncenter\"><img decoding=\"async\" loading=\"lazy\" aria-describedby=\"caption-attachment-7438\" class=\"wp-image-7438 size-full\" src=\"https:\/\/outofsite.biz\/cynance\/wp-content\/uploads\/2021\/07\/security_stack_mappings_overview-1.png\" alt=\"Overview of the Security Stack Mappings for Azure research project coverage\" width=\"700\" height=\"474\" srcset=\"https:\/\/outofsite.biz\/cynance\/wp-content\/uploads\/2021\/07\/security_stack_mappings_overview-1.png 700w, https:\/\/outofsite.biz\/cynance\/wp-content\/uploads\/2021\/07\/security_stack_mappings_overview-1-300x203.png 300w\" sizes=\"(max-width: 700px) 100vw, 700px\" \/><p id=\"caption-attachment-7438\" class=\"wp-caption-text\">Overview of the Security Stack Mappings for Azure research project coverage<\/p><\/div><h2><span style=\"font-weight: 400;\">Why is the Security Stack Mappings for Azure research project valuable?<\/span><\/h2><p><span style=\"font-weight: 400;\">Microsoft Azure contains a suite of built-in security controls. However, it can be challenging for their customers to understand how these security controls support their <a href=\"https:\/\/outofsite.biz\/cynance\/infrastructure-security\/cloud-security\/\">information security requirements<\/a>.<\/span><\/p><p><span style=\"font-weight: 400;\">The mappings project gives them detailed information about how these in-built security controls mitigate against the MITRE ATT&amp;CK framework, a familiar framework that many IT security professionals already use to identify their threat profile. They can then use this information to make informed judgements on their readiness against today\u2019s threats.<\/span><\/p><p><span style=\"font-weight: 400;\">Where Microsoft Azure is the first product to have carried out this exercise, many more will be released soon. The CITD is already working on Security Stack Mappings with AWS, Windows, and MacOS, and other leading providers are sure to follow.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">For organisations everywhere, this is a great initiative that will support security and risk management teams to balance the risks between digital transformation, effective work practices, and information and <a href=\"https:\/\/outofsite.biz\/cynance\/infrastructure-security\/network-security\/\">network security<\/a><\/span><\/p><p><span style=\"font-weight: 400;\">Stay safe.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>IT security teams face a constant battle to keep on top of the security controls provided by their core suppliers. They are required to show how a move to this platform, operating system or cloud will enhance their organisation\u2019s security, and why.&nbsp; The Security Stack Mappings for Azure research project from Microsoft and MITRE-Engenuity is&hellip;<\/p>\n","protected":false},"author":10,"featured_media":7425,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[63,62],"_links":{"self":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts\/7409"}],"collection":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/comments?post=7409"}],"version-history":[{"count":0,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts\/7409\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/media\/7425"}],"wp:attachment":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/media?parent=7409"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/categories?post=7409"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/tags?post=7409"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}