Using the MITRE ATT&CK Framework in SOC Ativities and Analyzing Cyber Attack
The growing complexity of cyber threats demands advanced strategies to strengthen cybersecurity operations. The MITRE ATT&CK Framework offers a systematic method for identifying, analyzing, and mitigating cyber-attacks within Security Operations Centers (SOCs). This paper examines how integrating the MITRE ATT&CK Framework enhances SOC capabilities in threat detection, incident response, and overall cyber resilience. By mapping adversary tactics, techniques, and procedures (TTPs) to real- world attack scenarios, the framework helps SOC analysts understand attacker behavior and respond more effectively. It enables proactive defense by providing structured knowledge of potential attack paths, allowing organizations to prioritize resources and improve their detection capabilities. Additionally, the study emphasizes the critical role of continuous skill development and automation in maximizing the framework's effectiveness in SOC environments. Implementing MITRE ATT&CK empowers SOC teams to stay ahead of evolving cyber threats, supporting a more proactive and intelligence-driven approach to cybersecurity operations. The findings suggest that leveraging the framework significantly strengthens an organization's defense mechanisms and enhances preparedness against sophisticated cyber- attacks.
Institutions
- Tashkent University of Information Technology (UZ)
Publication Details
- Published
- 2025-06-27
- DOI
- https://doi.org/10.1109/edm65517.2025.11096745
- Citations
- 1
- Primary Topic
- Geochemistry and Geologic Mapping
- Type
- article
- Field-Weighted Citation Impact
- 2.48