MITRE
A United States non-profit research organization focused on cybersecurity, defense, and engineering research and development. MITRE is widely known for maintaining foundational security infrastructure including the MITRE ATT&CK framework and the Common Vulnerabilities and Exposures (CVE) program.
Timeline (last 90 days)
CWE-345 is an entry in MITRE's Common Weakness Enumeration, named "Insufficient Verification of Data Authenticity", and is referenced by CVE, NVD and security tools.
CWE is maintained by MITRE and is a standardized enumeration of software weaknesses, each with a unique number, such as CWE-89 for SQL injection and CWE-79 for XSS.
For the FAA to advance AI systems into actual operations, it needs to work in concert with standards bodies such as MITRE and RTCA to develop dedicated certification standards for AI tools.
MITRE ATT&CK is a knowledge base of adversary tactics and techniques maintained by MITRE Corporation, categorized and numbered along two dimensions of tactical objectives and technical methods, currently covering hundreds of technique entries.
The MITRE ATT&CK framework evolved from the cyber kill chain and maps attack behaviors into 14 tactical phases and hundreds of specific techniques
MITRE ATT&CK systematically categorizes known attack techniques, providing defenders with an encyclopedia of attacker behavior.
CVE is a global vulnerability identification system maintained by MITRE Corporation, with identifiers assigned through a distributed network of CNAs, of which there are hundreds of authorized CNAs worldwide.
MITRE在2023年发布了面向AI/ML系统的威胁知识库MITRE ATLAS
All Facts (11)
MITRE ATT&CK systematically categorizes known attack techniques, providing defenders with an encyclopedia of attacker behavior.
70%Unverified每年约10万个CVE中仅有不到100个被确认为零日利用
65%UnverifiedThe CVE numbering system is maintained by MITRE Corporation, with the format CVE-year-sequence number.
60%UnverifiedCWE-345 is an entry in MITRE's Common Weakness Enumeration, named "Insufficient Verification of Data Authenticity", and is referenced by CVE, NVD and security tools.
50%UnverifiedCWE is maintained by MITRE and is a standardized enumeration of software weaknesses, each with a unique number, such as CWE-89 for SQL injection and CWE-79 for XSS.
50%UnverifiedFor the FAA to advance AI systems into actual operations, it needs to work in concert with standards bodies such as MITRE and RTCA to develop dedicated certification standards for AI tools.
50%UnverifiedMITRE ATT&CK is a knowledge base of adversary tactics and techniques maintained by MITRE Corporation, categorized and numbered along two dimensions of tactical objectives and technical methods, currently covering hundreds of technique entries.
50%UnverifiedThe MITRE ATT&CK framework evolved from the cyber kill chain and maps attack behaviors into 14 tactical phases and hundreds of specific techniques
50%UnverifiedCVE is a global vulnerability identification system maintained by MITRE Corporation, with identifiers assigned through a distributed network of CNAs, of which there are hundreds of authorized CNAs worldwide.
50%UnverifiedGitHub Security Advisories（GHSA）发布的漏洞公告可直接关联修复提交的diff，使研究人员能精确定位漏洞代码行
50%UnverifiedMITRE在2023年发布了面向AI/ML系统的威胁知识库MITRE ATLAS
50%