Using the MITRE ATT&CK Framework in SOC Ativities and Analyzing Cyber Attack

The growing complexity of cyber threats demands advanced strategies to strengthen cybersecurity operations. The MITRE ATT&CK Framework offers a systematic method for identifying, analyzing, and mitigating cyber-attacks within Security Operations Centers (SOCs). This paper examines how integrating the MITRE ATT&CK Framework enhances SOC capabilities in threat detection, incident response, and overall cyber resilience. By mapping adversary tactics, techniques, and procedures (TTPs) to real- world attack scenarios, the framework helps SOC analysts understand attacker behavior and respond more effectively. It enables proactive defense by providing structured knowledge of potential attack paths, allowing organizations to prioritize resources and improve their detection capabilities. Additionally, the study emphasizes the critical role of continuous skill development and automation in maximizing the framework's effectiveness in SOC environments. Implementing MITRE ATT&CK empowers SOC teams to stay ahead of evolving cyber threats, supporting a more proactive and intelligence-driven approach to cybersecurity operations. The findings suggest that leveraging the framework significantly strengthens an organization's defense mechanisms and enhances preparedness against sophisticated cyber- attacks.

Institutions

Publication Details

Published
2025-06-27
DOI
https://doi.org/10.1109/edm65517.2025.11096745
Citations
1
Primary Topic
Geochemistry and Geologic Mapping
Type
article
Field-Weighted Citation Impact
2.48
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Using the MITRE ATT&CK Framework in SOC Ativities and Analyzing Cyber Attack

1 citations
Geochemistry and Geologic Mapping
2.48
article

Using the MITRE ATT&CK Framework in SOC Ativities and Analyzing Cyber Attack

article en
1 citations

Abstract

The growing complexity of cyber threats demands advanced strategies to strengthen cybersecurity operations. The MITRE ATT&CK Framework offers a systematic method for identifying, analyzing, and mitigating cyber-attacks within Security Operations Centers (SOCs). This paper examines how integrating the MITRE ATT&CK Framework enhances SOC capabilities in threat detection, incident response, and overall cyber resilience. By mapping adversary tactics, techniques, and procedures (TTPs) to real- world attack scenarios, the framework helps SOC analysts understand attacker behavior and respond more effectively. It enables proactive defense by providing structured knowledge of potential attack paths, allowing organizations to prioritize resources and improve their detection capabilities. Additionally, the study emphasizes the critical role of continuous skill development and automation in maximizing the framework's effectiveness in SOC environments. Implementing MITRE ATT&CK empowers SOC teams to stay ahead of evolving cyber threats, supporting a more proactive and intelligence-driven approach to cybersecurity operations. The findings suggest that leveraging the framework significantly strengthens an organization's defense mechanisms and enhances preparedness against sophisticated cyber- attacks.

Tashkent University of Information Technology (UZ)
Openalex Percentile: Top 6%
Geochemistry and Geologic Mapping
2.48
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.

Using the MITRE ATT&CK Framework in SOC Ativities and Analyzing Cyber Attack · (2025) | TGRS Research Map | TGRS