Counter-APT Red Teaming
Jacob G. Oakley · Apress eBooks · 2019
The concept of counter-APT red teaming (CAPTR teaming) is a method of reverse red teaming I theorized, designed, and evaluated during my doctoral research and in my dissertation. As mentioned in earlier chapters, a red team is at a huge disadvantage when it comes to emulating appropriately, and thus aptly mitigating, an advanced persistent threat. When it comes to red team engagements, APTs specifically represent a replication challenge for even the most talented offensive security professionals. Even when the skills of an ethical hacker and a malicious one are on an even playing field, the modern state of offensive security tilts almost every aspect in favor of the actual attacker verse the emulated one. The end result of attempting to address this issue was an offensive security assessment methodology that, although motivated by the APT challenge, was beneficial in many ways compared to traditional red teaming.