Linking Common Vulnerabilities and Exposures to the MITRE ATT&CK Framework: A Self-Distillation Approach

Understand

Due to the ever-increasing threat of cyber-attacks to critical cyber infrastructure, organizations are focusing on building their cybersecurity knowledge base.

• A salient list of cybersecurity knowledge is the Common Vulnerabilities and Exposures (CVE) list, which details vulnerabilities found in a wide range of software and hardware.
• However, these vulnerabilities often do not have a mitigation strategy to prevent an attacker from exploiting them.
• A well-known cybersecurity risk management framework, MITRE ATT&CK, offers mitigation techniques for many malicious tactics.