Introduction to MITRE ATT&CK: Concepts and Use Cases

As networks become more complex and large-scale, the types of attacks become more diverse, and the importance of cyber security is increasing. Therefore, a need for security analysis is growing to classify and analyze several cyber attack types to prepare for the attacks. To solve this problem, MITRE presented ATT&CK as an attack classification model that systematically classifies cyber attackers’ tactics, techniques, and procedures. Therefore, we review MITRE’s ATT&CK in terms of concept and the use cases.