Provided here is a compendium of key papers, articles, and links from across the site, including both MITRE and external resources.

Papers

• A Macro Method for Measuring Economic-Benefit Returns on Cybersecurity Investments: The Table Top Approach
• A New Cyber Defense Playbook
• A Public Response to Emerging Exploits: Changing the State of HLS Cyber Capacity: Moving to Threat-based Active Defense
• A Public Response to Emerging Exploits: Engaging Civil Defenders to Enhance the Collective Cyber Defenses of the United States
• Active Defense Strategy for Cyber
• Building Secure, Resilient Architectures for Cyber Mission Assurance
• Cyber Information-Sharing Models: An Overview
• Cyber Resiliency Engineering Framework
• Cyber Resilience for Mission Assurance
• Cyber Resiliency
• Cyber Resiliency Metrics
• Enabling Distributed Security in Cyberspace: Building a Healthy and Resilient Cyber Ecosystem with Automated Collective Action
• Intelligence-Driven Computer Network Defense Informed by Analysis of Adversary Campaigns and Intrusion Kill Chains
• Resiliency Research Snapshot
• Resilient Architectures for Mission and Business Objectives (RAMBO)
• Standardizing Cyber Threat Intelligence Information with the Structured Threat Information eXpression (STIX™)
• Trusted Automated eXchange of Indicator Information (TAXII™)

Articles

• Dark Reading: "Attack Intelligence-Sharing Goes 'Wire-Speed'"
• The MITRE Digest: Defending Against Advanced Persistent Threats
• The MITRE Digest: Honeyclients Root Out Attackers' Domains
• The MITRE Digest: Insider Threats: Countering Cyber Crime from Within
• The MITRE Digest: Resilient Cyber Architectures Keep Government IT Operations Mission-Ready
• The MITRE Digest: Using Cyber Common Sense to Combat Threats to Privacy

Links

• Technology Transfer Office
• Common Attack Pattern Enumeration and Classification (CAPEC™)
• Common Configuration Enumeration (CCE™)
• Common Event Expression (CEE)
• Common Platform Enumeration (CPE)
• Common Vulnerabilities and Exposures (CVE®)
• Common Weakness Enumeration (CWE™)
• Common Weakness Scoring System (CWSS™)
• Common Weakness Risk Analysis Framework (CWRAF™)
• Cyber Observable eXpression (CybOX™)
• Malware Attribute Enumeration and Characterization (MAEC™)
• Open Vulnerability and Assessment Language (OVAL®)
• Structured Threat Information eXpression (STIX™)
• Trusted Automated eXchange of Indicator Information (TAXII™)