We've talked a lot about the problem of data in the field of cybersecurity, but fortunately some projects are trying to do something about it!
So it's the CALDERA project we're going to talk about today. It's a cybersecurity tool developed by MITRE Corporation that aims to give you the ability to simulate exercises such as the simulation of a reading team or an incident response. It consists of a command and control server enabling you to carry out any of the attacks described in MITRE's ATT&CK! framework. It helps cybersecurity professionals reduce the time and resources they need to carry out cybersecurity tests.
This platform empowers IT security professionals in different ways:
Create a specific threat profile and see where we can be sensitive.
Perform automated tests
Carry out manual assessments with computer assistance
Enabling cutting-edge research into cyber games
So all that's left is to try it out and see if we can generate realistic, usable data.