The AttackIQ Security Optimization Platform enables risk and security practitioners to continuously assess and improve critical security controls within their production environment, optimizing their end-to-end security posture and providing trend reporting for demonstrable improvement over time.

By surfacing better, automated insights, teams are able to make smarter investment decisions and deliver on both business continuity and greater program effectiveness.

Critical capabilities include:

Leveraging MITRE ATT&CK for a Threat-Informed Defense

AttackIQ’s platform deploys lightweight agents to existing user devices or servers, physical or virtual, and easily turns those devices into test points.

Using a threat-informed approach to breach and attack simulation (BAS) that is based on the tactics, techniques and procedures (TTPs) detailed in the MITRE ATT&CK® framework, AttackIQ’s platform allows security teams to:

• Identify and prioritize relevant cyber adversaries and threats

• Emulate known adversary behavior

• Identify gaps that may exist in security controls, and

• Verify that mitigation efforts are successful through ongoing testing

(Learn how AttackIQ’s Security Optimization Platform helps security teams achieve cybersecurity readiness through automated security control validation. Courtesy of AttackIQ and YouTube.)

Ensuring Alignment of Security Processes Through Custom Blueprints

AttackIQ  provides step-by-step Blueprints to help customers optimize 26 distinct solutions across the security organization.

The operations team can validate that its detection strategy is effective and enable evolution to threat hunters and proactive exercises.

Risk and Compliance teams can automate their risk models with continuous control efficacy data and answer their regulatory remit with automation-derived dashboards.

Security engineers and architects can leverage ATT&CK-based threat modeling as part of lifecycle security assessment.

Emulating Comprehensive, Multi-Stage Adversary Campaigns

AttackIQ recently announced a series of innovations to its AttackIQ Informed Defense Architecture (AIDA) that help cybersecurity teams better test their people, processes, and defensive technologies against advanced, multi-stage adversarial cyberattack campaigns.

AttackIQ now offers the industry’s only adversary emulation architecture built to test artificial intelligence (AI) and machine learning (ML)-based cyberdefense technologies in production, while emulating comprehensive, multi-stage attacks.

(The AttackIQ platform is simple and intuitive. Our dashboard lets you visualize attack readiness and system performance at a glance. The Projects section gives you a versatile workspace to create and manage attack scenarios. Courtesy of AttackIQ and YouTube.)

AttackIQ customers can improve their cyberdefense effectiveness in several ways:

• AttackIQ’s Anatomic Engine combines the industry’s leading atomic testing capabilities with the most comprehensive adversary emulation capabilities available on the market.

  • By chaining attacks together in a graph, the Anatomic Engine allows organizations in a user interface to measure their defenses against a series of attacker patterns and makes it easy for operators of all skill levels to create complex adversary attack graphs that are purpose-built for emulating attacker patterns.

• The AttackIQ Network Control Validation Module combines a new comprehensive network topology map with adversarial attack replays.

  • This helps organizations rapidly exercise the end-to-end validation of network deployed security controls and gives technology-specific remediation guidance, ensuring customers get the most out of their cyberdefense investments.

  • Customers who use next-generation firewalls and other AI and ML-based defense technologies can operate with increased confidence in their network security effectiveness.

• Lastly, the AttackIQ Hosted Agent simplifies the process of deploying AttackIQ’s platform, improving the customer experience by providing a managed, external source and target.

  • This makes it simpler to emulate advanced adversary behaviors.

  • The net result is an overall increase in security program ease of use and effectiveness.

(With the AttackIQ Security Optimization Platform you get Better Insights, Better Decisions, and Real Security Outcomes to increase efficiency and effectiveness across your entire security organization. Courtesy of AttackIQ and YouTube.)

Providing User-Powered Insights

In addition to the above emulation capabilities, AttackIQ’s open API system is powered by its user community, allowing new attack scenarios and TTPs to be easily incorporated.

All scenarios in the scenario library are python classes that can be downloaded and easily modified by customers.

Customers can easily generate their own tests based on threat intelligence, or develop new tests for proprietary security controls that only they know about, and contribute new content to the community weekly and share tips and tricks daily.

The AttackIQ Security Optimization Platform provides a full suite of data-driven reports for technical and executive teams.

On the basis of the data that AttackIQ generates, chief information security officers (CISOs) can objectively report, like any other department in the enterprise, with clear analysis about their security program’s effectiveness over time.

The AttackIQ Security Optimization Platform gives enterprises a complete picture of security control performance, outlines prescriptive fixes for prioritized issues, and helps identify areas that require investment or additional analysis.

The net result is increased visibility and control of the total security program.

AttackIQ announces the availability of the new AttackIQ Vanguard managed security validation service.

AttackIQ Vanguard helps cybersecurity teams proactively uncover gaps in their security controls and take action on remediation recommendations. Customers receive detailed data analysis and reporting on their program performance that can be shared with red and blue teams, risk and compliance teams, and executive and board members.

The new managed service is based on AttackIQ’s industry-leading breach and attack simulation technology, which is deployed and trusted by some of the world’s most sophisticated enterprise and government cybersecurity teams.

“Untested controls are a risk to the business–they fail constantly and silently,” said Neal Bridges, Chief Content Officer at INE and former Global Head of Cybersecurity Operations at Mondelēz International.

“If your team is resource-constrained, an automated control validation service backed by practitioners who know how to operationalize a threat-informed defense is a smart way to stay ahead of potential breaches and attacks.”

Key customer benefits of the new service offering include the ability to:

Proactively find and close security control gaps 

• Get deep and continuous breach and attack simulation analysis, 24/7, to find and close gaps before adversaries exploit them.

• Weekly detailed reports make it easy to share information across security, risk, and compliance teams, and improve the organization’s overall security posture.

Improve cybersecurity program investments. 

• Leverage MITRE ATT&CK tactics and techniques to measure the effectiveness of existing security controls. By understanding which investments are working and which are not, customers can reduce costs and reallocate budget by rationalizing and consolidating controls.

Elevate team effectiveness. 

• Augment skilled analysts with the most advanced breach and attack simulation technology, plus AttackIQ cybersecurity experts who use custom tools, cloud-scale data, and real-time threat intelligence.

• Customers get the benefits of AttackIQ’s experienced team of cybersecurity specialists, who investigate and advise on the potential for ransomware and attacks in customer environments.

Improve overall cyber-hygiene and security program readiness. 

• Even with the most advanced cyberdefense technologies, controls can fail due to technology misconfiguration, team performance, or capability gaps.

• AttackIQ Vanguard helps organizations proactively defend against advanced attackers by validating security controls, improving team performance, and identifying capability gaps through regular automated adversary emulation.

“Adversaries don’t discriminate against organizations with high and low cyber operational capability maturity models,” added Carl Wright, Chief Commercial Officer at AttackIQ.

“We launched AttackIQ Vanguard to democratize advanced cybersecurity control validation and close the gap left by ad hoc testing approaches, so customers have greater situational visibility into the effectiveness of their security programs.”

AttackIQ, a leading independent vendor of breach and attack simulation solutions, built the industry’s first Security Optimization Platform for continuous security control validation and improving security program effectiveness and efficiency.

The company is trusted by leading organizations worldwide to plan security improvements and verify that cyberdefenses work as expected, aligned with the MITRE ATT&CK framework.

AttackIQ is committed to giving back to the cybersecurity community through its free award-winning  AttackIQ Academy, open Preactive Security Exchange, and partnership with MITRE Engenuity’s Center for Threat-Informed Defense.

To Learn More, please visit www.attackiq.com. 

AttackIQ Named Newest Competitor in 2021 ‘ASTORS’ Awards Program

American Security Today’s ‘ASTORS’ Homeland Security Awards program is today in its Sixth Year and continues to recognize the Outstanding Innovations of top firms and agencies in the Homeland Security and Public Safety fields.

Nominations are currently being accepted for the 2021 ‘ASTORS’ Homeland Security Awards at https://americansecuritytoday.com/ast-awards/.

Comprehensive List of Categories Include:

Access Control/ Identification	Personal/Protective Equipment	Law Enforcement Counter Terrorism
Perimeter Barrier/ Deterrent System	Interagency Interdiction Operation	Cloud Computing/Storage Solution
Facial/IRIS Recognition	Body Worn Video Product	Cyber Security
Video Surveillance/VMS	Mobile Technology	Anti-Malware
Audio Analytics	Disaster Preparedness	ID Management
Thermal/Infrared Camera	Mass Notification System	Fire & Safety
Metal/Weapon Detection	Rescue Operations	Critical Infrastructure
License Plate Recognition	Detection Products	COVID Innovations
Workforce Management	Government Security Programs	And Many Others to Choose From!

Don’t see a Direct Hit for your Product, Agency or Organization?

Submit your category recommendation for consideration to Michael Madsen, AST Publisher at: mmadsen@americansecuritytoday.com.

Register for the 2021 ‘ASTORS’ Luncheon Today

At ISC East 2021 you with the opportunity to interact with a broad array of security industry professionals.

Legendary Police Commissioner Bill Bratton of the NYPD, the BPD and former Chief of the LAPD, will join the 2021 ‘ASTORS’ Homeland Security Awards Luncheon on November 17th, to sign copies of his new book ‘The Profession: A Memoir of Community, Race, and the Arc of Policing in America’.

ISC East works closely with other businesses in the security and public safety space to help bring together the Northeast’s largest security trade show each year.

In collaboration with premier sponsor SIA (Security Industry Association) and in partnership with ASIS NYC, ISC East is proud to work with and be supported by various associations, trade publications, charities, and more.

Therefore, the ISC audience of security dealers, installers, integrators, consultants, corporate, government and law enforcement/first responder practitioners will be joined by the ASIS NYC audience of major corporate managerial-through-director-level national and global security executives.

The combination of one-on-one conversations with the industry’s top innovators,  integrators and security executives, special events, high-quality education and training, and strong support from industry associations, will allow attendees to learn and evaluate solutions from leading security exhibitors and brands. 

With the integration of the Natural Disaster and Emergency Management (NDEM) Expo, the show is moving even further into our reader’s wheelhouse!

Your ‘ASTORS’ Awards Luncheon registration includes complimentary attendee access to both ISC East – and NDEM!

Thank take advantage of this exclusive luncheon opportunity to take a break from the show – Invite your team, guests, clients and show visitors to a lovely and affordable plated meal event in the heart of New York City, for  a fabulous networking opportunity!

Go to https://americansecuritytoday.com/product/awards-luncheon/ to secure your seat or reserve a table.

***Early Registration Discount Ends November 1. Limited space available so Register Today. There will be no on-site registrations.

AST strives to meet a 3 STAR trustworthiness rating, based on the following criteria:

• Provides named sources
• Reported by more than one notable outlet
• Includes supporting video, direct statements, or photos

Subscribe to the AST Daily News Alert Here.