August 2025
What are frameworks? Why are they important? We thought you’d never ask.
Frameworks are sets of foundational principles to guide problem solving, offering structure and common language along the way.
It may sound nebulous, but that’s the point. Unlike roadmaps, which lay out specific steps, frameworks are adaptable for users’ specific goals. They’re anchors. A place to start. An entrée into the conversation. They also serve as a place for people working on the same set of challenges to huddle and rally.
The goal? Mobilize the community for the benefit of the community.
It’s a hard job, but somebody’s got to do it: At MITRE, we’re framework nerds, developing them for a slew of critical challenges, across domains. Some of our greatest hits include: ATT&CK®, SAF, CALDERA™, ATLAS™, D3FEND™.
7-minute read time
QUOTABLE
“MITRE is a hub of lifelong learners. Having access to that many people with the same mindset, who are also willing to help, is such a blessing.”
-Ayomide Olafusi, Norfolk State University student, on his AI Futures summer internship at MITRE. Learn more about MITRE's student career programs.
PIN DROP
Our CEO Addresses Executives at Esri Summit
Geospatial data is everywhere—quietly helping power phone apps we use daily (think Waze and Google Maps). Spatial analytics and mapping technology from software giant Esri offers crucial insight on a multitude of public safety initiatives.
At an Esri summit in San Diego last month, our CEO Mark Peters spoke to industry executives about how MITRE is using geospatial technology for the good of local communities and the nation. He also highlighted the importance of our strategic partnerships with the commercial sector.
Case in point: Esri’s data married with MITRE’s deep technical expertise presents endless opportunities for thoughtful innovation in public safety.
NEW FRAMEWORK
Evaluating AI Cyber Threats
AI in the wrong hands has enormous potential to wreak havoc on networks. How much? That’s the million-dollar question. A MITRE team developed benchmarks to forecast the possibilities. OCCULT is a set of evaluation methods for measuring cybersecurity threats associated with large language models.
Preparation is key: MITRE is intimately familiar with the cyber threat landscape—we know the right questions to ask to inform strategic defenses. Marissa Dotter and Gianpaolo Russo, members of the team behind the tool, presented at Black Hat USA earlier this month. Watch an interview with them here.
CELEBRATING FIRSTS
What’s in a Domain? MITRE Celebrates First .org
In 1985, when the internet was shiny and new, companies from around the globe registered domain names for what would eventually become their online identity on the World Wide Web.
Not aligning with any of the available suffixes—.com (commercial), .gov (government), .edu (education), or .mil (military)—MITRE became the first to adopt .org, short for “organization.”
We don’t fit in just one box: Trusted to operate federally funded R&D centers drawing on the brainpower of the nation’s science and technology experts, MITRE’s breadth and depth of work sets us apart from other entities on the internet and beyond.
ALPHABET SOUP
AADAPT
Adversarial Actions in Digital Asset Payment Technologies
Last month, an Executive Order paved the way for regulated crypto. Our recently launched framework, AADAPT™—which addresses vulnerabilities in digital financial systems—is MITRE’s way of adapting to the changing landscape.
Bottom line: As cryptocurrencies become more popular, the need for unified guidance for defenders goes up.
OUR CULTURE IN ACTION
Early Career Engineer Develops Framework to Protect Minors Online
Pamela Petterchak always wanted to make people’s lives better with technology. Taking advantage of MITRE’s early career research program, the cybersecurity engineer set out to help protect young people online. She developed a framework that maps predators’ most common tactics to outcomes along an attack chain, laying out a clear picture of how online behavior—like using a false identity—can escalate to in-person crimes.
Meeting teens where they’re at—online: Nearly half of teens say they’re “almost constantly” online, according to the Pew Research Center. Add to that: online enticement of minors is up 300% from 2021 to 2023.
EVENT NEWS
Mark Your Calendars for ATT&CKCON 6.0
The backbone of ATT&CK is community, and we roll deep. Join us at our 6th annual event—better known as ATT&CKcon—Tues. to Weds., Oct. 14-15 in McLean, Va. It’s the perfect opportunity to network, exchange ideas, and explore the latest innovations shaping the future of cybersecurity. Virtual registration opens Weds., Sept. 3.