Coalfire Labs, a provider of cybersecurity advisory and assessment services, has unveiled a new way for companies to gauge just how secure their digital defences really are.
The new proprietary Threat Modeling and Attack Simulation (TMAS) methodology is also developed to help organisations guide contingency strategies and justify overall security operations.
“The threat landscape is becoming more sophisticated, and security professionals have to look beyond the expected,” said Mike Weber, vice president of Coalfire Labs. “With our new TMAS approach, Coalfire brings our clients a unique methodology to plan for the unexpected, optimise security systems and workflows, and to establish a baseline command of security operations toolsets.”
The Coalfire TMAS engagement incorporates the use of purple team simulations to represent both attacker and defender postures, customised according to each client’s priorities. In addition, the Coalfire Labs TMAS team identifies low-priority, overlooked and unexpected threat vectors.
It does this by evaluating the risk management strategy to determine how the organisation has prioritised security investments, identifying threat actors and threat vectors that could leave the organisation vulnerable based on the prioritisation of risks, developing attack simulations based on the application of the MITRE ATT&CK framework and the organisation’s threat model, and executing attacks to identify security program strengths and weaknesses, and use these to enhance the threat model and inform future attack simulations
“Our testers can carry out any attack vector against any organisation by physical access, social engineering, technical attacks, or non-traditional IoT solutions,” said Weber. “Coalfire’s TMAS engagements are designed to build a threat model unique to each business, and to complement additional initiatives such as vulnerability assessments and defensive diagnostics.”
Copyright © 2018 RegTech Analyst
