Get Your Security Priorities Straight! How to Identify Workloads Und...
summary
Cubescape maps controls to MITRE-style ATT&CK categories and builds attack chains by linking failed controls so combined failures raise risk more than individual ones. Controls are implemented as Rego tests and the prioritization engine multiplies per-control severities along a chain then sums chain scores to rank workloads. Output includes attack trees, links to remediation, and IDE/GitHub integrations. Evaluation includes an Intel deployment and scans of nearly 100,000 workloads, feature flagged as alpha while vulnerability linking remains incomplete.
AI-written summary · about
chapters (10)
- 0:00Security priorities in cloud native
- 1:50Research and team behind project
- 3:36Intel’s offensive security perspective
- 6:02Cubescape core capabilities
- 9:17Prioritizing security workloads
- 10:23Attack chains and prioritization engine
- 17:30Demo of attack chains
- 21:01Limitations and future improvements
- 22:50Call to action
- 24:36Closing remarks and Q&A
related talks
44mImprove Likelihood Calculation by Mapping MITRE ATT&CK to Existing Controls
58mMITRE ATT&CK for Developers
39mOrganizational Context Matters: Security Control Effectiveness on Vulnerabilities for Prioritization
25mSecurity Chaos Engr.: Fix Things and Make Friends
33mDecoding Cyber Threats: A Practical Guide to Using Attack Trees
30mIt's Just a Jump To The Left (of Boom)
43mThe Art of Vulnerability Management - Practical Application of Cyber Triage
01h 11m2024 Security BSides // Adam Pennington