Measuring and Improving Cyber Defense Using the MITRE ATT&CK Framework

Throughout this paper, we describe what ATT&CK is, where it is going, ways of using the information, and how to leverage the now-extensive collection of information and ecosystem of tools surrounding ATT&CK to develop, bolster and assess your own defenses.