Your ATs to Ts: MITRE ATT&CK Attack Technique to P-SSCRM Task Mapping
Fuente:
arXiv
Gespeichert in:
| Hauptverfasser: | , , , , |
|---|---|
| Format: | Preprint |
| Veröffentlicht: |
2025
|
| Schlagworte: | |
| Online-Zugang: | |
| Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
| _version_ | 1866916861160980480 |
|---|---|
| author | Hamer, Sivana Bowen, Jacob Haque, Md Nazmul Madden, Chris Williams, Laurie |
| author_facet | Hamer, Sivana Bowen, Jacob Haque, Md Nazmul Madden, Chris Williams, Laurie |
| contents | The MITRE Adversarial Tactics, Techniques and Common Knowledge (MITRE ATT&CK) Attack Technique to Proactive Software Supply Chain Risk Management Framework (P-SSCRM) Task mapping described in this document helps software organizations to determine how different tasks mitigate the attack techniques of software supply chain attacks. The mapping was created through four independent strategies to find agreed-upon mappings. Because each P-SSCRM task is mapped to one or more tasks from the 10 frameworks, the mapping we provide is also a mapping between MITRE ATT&CK and other prominent government and industry frameworks. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2507_18037 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | Your ATs to Ts: MITRE ATT&CK Attack Technique to P-SSCRM Task Mapping Hamer, Sivana Bowen, Jacob Haque, Md Nazmul Madden, Chris Williams, Laurie Software Engineering Cryptography and Security The MITRE Adversarial Tactics, Techniques and Common Knowledge (MITRE ATT&CK) Attack Technique to Proactive Software Supply Chain Risk Management Framework (P-SSCRM) Task mapping described in this document helps software organizations to determine how different tasks mitigate the attack techniques of software supply chain attacks. The mapping was created through four independent strategies to find agreed-upon mappings. Because each P-SSCRM task is mapped to one or more tasks from the 10 frameworks, the mapping we provide is also a mapping between MITRE ATT&CK and other prominent government and industry frameworks. |
| title | Your ATs to Ts: MITRE ATT&CK Attack Technique to P-SSCRM Task Mapping |
| topic | Software Engineering Cryptography and Security |
| url | https://arxiv.org/abs/2507.18037 |