Cyber Threat Management Framework (CTMF) Project

CTMF is a comprehensive framework

build upon the OODA (Observe, Orient,

Decide, Act) decision cycle that enables

cyber threat management with the 

speed and agility needed in today's

real-time dynamic threat environment.

Observe

Detect use case development

Content architecture

Use case optimization

Use case control testing

Honeypot development

Sensor data

Use case cost modeling

Orient

Intelligence gathering

Intelligence data mining

Risk assessment

Control assessment

Behavior modeling

Context enrichment

Threat data warehousing

Security Data Science

Decide

Situational awareness

Automated triage

Security analyst  (human) triage

Act

Malware Analysis

Automating responses

Incidents Response

Response operations

Security Operations Center

We are excited to be developing the world’s first independent framework for CTM and this is a true ground floor opportunity for experienced professionals to take part in the success of IOCTM. We are looking to add industry professionals with demonstrated expertise in major subject matter areas of CTM including:

• Intelligence research and gathering
• Automating intelligence data management
• Threat intel exchange and information standards STIX, TAXII
• Data management constructs CybOX, MAEC, CAPEC and CPE
• Asset management in the context of prioritizing and categorizing threats
• Advanced SIEM use cases for operationalizing the management of threat data, mapping them to business rules
• Security Intelligence – using Bigdata analytics, behavioral profiling and other data science techniques to discover threats from ordinary system or operational data
• Manual and automated end-point and network forensics
• Incident Response including automating IR and automating response
• Malware analysis including setting up automated analysis environments based on commercial or open source tools such as Cuckoo sandbox
• Secure Operations Center (SOC) analysts, management and support personnel
• Threat management metrics, VERIS, Cyber Kill Chain, etc.