Defender Policy Evaluation and Resource Allocation Using MITRE ATT&CK Evaluations Data

Protecting against multi-step attacks of uncertain duration and timing forces defenders into an indefinite, always ongoing, resource-intensive response. To effectively allocate resources, a defender must be able to analyze multi-step attacks under assumption of constantly allocating resources agains