Security Stack Mappings - Google Cloud Platform

Published

Problem

Administrators and defenders of Google Cloud Platform (GCP) lack a comprehensive view of how native GCP security controls defend against real-world adversary TTPs.

Solution

Map the effectiveness of native security capabilities available in GCP to specific ATT&CK techniques.

Impact

Empowers defenders with independent assessments of which GCP controls are effective to mitigate relevant adversary TTPs.

Project Resources

Published: 28 June 2022

 

Funding Research Participants

Project Summary

This project identified and mapped security capabilities available as part of GCP to the ATT&CK techniques to which they can detect, protect, or respond. This allows cyber defenders of cloud platforms to make threat-informed decisions about which capabilities to use and how to use them.