Meta tags:
Headings (most frequently used words):
mitigations, mobile, 13,
Text of the page (most frequently used words):
the (18), mobile (15), and (11), all (11), att (10), security (10), that (10), enterprise (9), #mitigations (8), system (6), device (6), ics (5), none (5), data (5), techniques (5), devices (5), can (5), application (5), mitre (4), guidance (4), not (4), vulnerabilities (4), used (4), network (4), management (4), mitigation (4), attestation (4), use (3), resources (3), software (3), cti (3), detection (3), defenses (3), bring (3), against (3), discovered (3), also (3), may (3), ensure (3), enable (3), updates (3), bootloader (3), developers (3), based (3), this (3), methods (3), 2026 (2), corporation (2), are (2), policy (2), domains (2), reference (2), campaigns (2), groups (2), components (2), analytics (2), strategies (2), assets (2), sub (2), tactics (2), matrices (2), core (2), objects (2), describes (2), any (2), behaviors (2), operating (2), improvements (2), provide (2), weaknesses (2), block (2), version (2), android (2), being (2), capability (2), integrity (2), partition (2), code (2), perform (2), mitigate (2), council (2), filtering (2), mobility (2), emm (2), mdm (2), their (2), encrypt (2), traffic (2), using (2), tls (2), encryption (2), for (2), compromised (2), applications (2), capabilities (2), more (2), such (2), from (2), developer (2), with (2), tools (2), secure (2), prevent (2), technique (2), ckcon (2), person (2), tickets (2), faq (2), 2015, registered, trademarks, cookie, preferences, website, changelog, privacy, terms, contact, reset, filters, training, given, users, set, particular, configuration, settings, avoid, specific, potentially, risky, user, m1011, new, versions, only, patches, but, often, architecture, resilience, potential, have, yet, been, they, observed, adversary, recent, m1006, include, verified, boot, which, cryptographically, ensures, m1004, install, response, m1001, unlock, hence, allowing, flashed, onto, periodic, checks, locked, lock, m1003, order, signaling, ss7, exploitation, communications, reliability, interoperability, csric, interconnections, between, operators, inappropriate, requests, interconnection, m1014, known, provision, policies, control, aspects, allowed, behavior, m1012, should, transport, layer, protocol, protection, sensitive, deter, attacks, desired, could, message, before, passing, m1009, category, associate, might, increase, risk, compromise, therefore, recommended, m1059, variety, exist, enterprises, identify, rooted, jailbroken, whether, mechanisms, built, directly, into, third, party, other, some, trivial, evade, while, others, sophisticated, deploy, method, m1010, remote, when, available, safetynet, samsung, knox, tima, prohibit, fail, accessing, m1002, focuses, providing, knowledge, best, practices, needed, write, reduce, implement, design, principles, integrating, throughout, development, lifecycle, sdlc, aims, introduction, exploitable, systems, apis, implemented, through, following, measures, m1013, products, threat, defense, mtd, offer, various, certain, antivirus, antimalware, m1058, description, name, represent, concepts, classes, technologies, successfully, executed, home, open, join, october, mclean, hotel, location, details, found, register, here, search, blog, contribute, benefactors, legal, branding, history, engage, advisory, learn, about, get, started, detections,
Text of the page (random words):
mitigations mobile mitre att ck matrices enterprise mobile ics tactics enterprise mobile ics techniques enterprise mobile ics defenses mitigations enterprise mobile ics assets detections detection strategies analytics data components cti groups software campaigns resources get started learn more about att ck att ck advisory council att ckcon att ck data tools faq engage with att ck version history updates legal branding benefactors contribute blog search att ckcon 7 0 in person tickets are open join us october 27 28 2026 in mclean va register here for in person tickets hotel and location details can be found in the faq home mitigations mobile mobile mitigations mitigations represent security concepts and classes of technologies that can be used to prevent a technique or sub technique from being successfully executed mitigations 13 id name description m1058 antivirus antimalware mobile security products such as mobile threat defense mtd offer various device based mitigations against certain behaviors m1013 application developer guidance application developer guidance focuses on providing developers with the knowledge tools and best practices needed to write secure code reduce vulnerabilities and implement secure design principles by integrating security throughout the software development lifecycle sdlc this mitigation aims to prevent the introduction of exploitable weaknesses in applications systems and apis this mitigation can be implemented through the following measures m1002 attestation enable remote attestation capabilities when available such as android safetynet or samsung knox tima attestation and prohibit devices that fail the attestation from accessing enterprise resources m1010 deploy compromised device detection method a variety of methods exist that can be used to enable enterprises to identify compromised e g rooted jailbroken devices whether using security mechanisms built directly into the device third party mobile security applications enterprise mobility management emm mobile device management mdm capabilities or other methods some methods may be trivial to evade while others may be more sophisticated m1059 do not mitigate this category is to associate techniques that mitigation might increase risk of compromise and therefore mitigation is not recommended m1009 encrypt network traffic application developers should encrypt all of their application network traffic using the transport layer security tls protocol to ensure protection of sensitive data and deter network based attacks if desired application developers could perform message based encryption of data before passing it for tls encryption m1012 enterprise policy an enterprise mobility management emm also known as mobile device management mdm system can be used to provision policies to mobile devices to control aspects of their allowed behavior m1014 interconnection filtering in order to mitigate signaling system 7 ss7 exploitation the communications security reliability and interoperability council csric describes filtering interconnections between network operators to block inappropriate requests m1003 lock bootloader on devices that provide the capability to unlock the bootloader hence allowing any operating system code to be flashed onto the device perform periodic checks to ensure that the bootloader is locked m1001 security updates install security updates in response to discovered vulnerabilities m1004 system partition integrity ensure that android devices being used include and enable the verified boot capability which cryptographically ensures the integrity of the system partition m1006 use recent os version new mobile operating system versions bring not only patches against discovered vulnerabilities but also often bring security architecture improvements that provide resilience against potential vulnerabilities or weaknesses that have not yet been discovered they may also bring improvements that block use of observed adversary techniques m1011 user guidance describes any guidance or training given to users to set particular configuration settings or avoid specific potentially risky behaviors core objects all core att ck objects all none matrices tactics techniques sub techniques defenses all defenses all none mitigations assets detection strategies analytics data components cti all cti all none groups software campaigns reference all reference all none resources domains all domains all none enterprise mobile ics reset filters contact us terms of use privacy policy website changelog cookie preferences 2015 2026 the mitre corporation mitre att ck and att ck are registered trademarks of the mitre corporation
|
