跟讀練習: MITRE ATT&CK® Framework - 通過影片學習英語口語
選擇練習模式
每種模式都會開啟全屏練習室。
34 句
如果句子過短或過長，請點選 Edit 進行調整。
1
It's been reported that once an organization is breached, adversaries typically lurk on networks for months before being detected.
2
How did they get in?
3
How are they moving around?
4
What are they doing?
5
So where do you start?
6
MITRE's ATT&CK framework describes how adversaries penetrate networks and then move laterally, escalate privileges, and generally evade your defenses.
7
ATT&CK looks at the problem from the perspective of the adversary, what goals they are trying to achieve, and what specific methods they use.
8
ATT&CK organizes adversary behaviors into a series of tactics, specific technical objectives that an attacker wants to achieve.
9
Some examples of tactics include defense evasion, lateral movement, and exfiltration.
10
Within each tactic category, attack defines a series of techniques.
11
Each technique describes one way an adversary may try to achieve that objective.
12
There are multiple techniques within each tactic
13
because adversaries may use different methods based on their own expertise
14
or things like the availability of tools or how your systems are configured.
15
Each technique defined in attack includes a description of the method used by the adversary, the systems or platforms it applies to,
16
and where known, what specific adversary groups use this technique.
17
Techniques also describe ways to mitigate the behavior, along with any published references to the technique being employed.
18
ATT&CK helps you understand how adversaries might operate so you can plan how to detect or stop that behavior.
19
Armed with this knowledge, you can better understand the different ways an adversary prepares for, launches, and executes their attacks.
20
Another important use of ATT&CK is to help you detect an adversary's actions.
21
The ATT&CK framework includes resources designed to help you develop analytics that detect the techniques used by an adversary.
22
ATT&CK also maintains a library of information about selected adversary groups and the campaigns they have conducted.
23
And since ATT&CK is based on real-world observations, it allows you to correlate specific adversaries and the techniques they've used.
24
Because adversaries often use different techniques to attack different platforms and technologies, the ATT&CK framework is divided into a series of technology domains.
25
currently covered by ATT&CK include enterprise networks with Windows and Linux operating systems and mobile devices.
26
The ATT&CK framework can help your organization better understand the techniques specific adversaries are likely to use,
27
information you can use to evaluate your defenses and strengthen them where it matters most.
28
MITRE is building a community around ATT&CK so that experts in different domains
29
and technologies can come together to refine and extend the knowledge contained in the framework.
30
And because MITRE is a not-for-profit organization operating in the public interest, we can provide a conflict-free environment to create,
31
collect, share, and manage this information, making it available to everyone.
32
Learn more about ATT&CK and what else we're doing in cyber threat intelligence.
33
MITRE.
34
We solve problems for a safer world.
FOR YOU
推薦影片
C16
228 句
Cybersecurity Architecture: Five Principles to Follow (and One to Avoid)
Business EnglishUniversity StudentsWorking Adults
C112
25 句
Introducing the Agents API
Business EnglishUniversity StudentsWorking Adults
C114
122 句
Learn Marketing Case Interviews in 8 Minutes
Business EnglishInterview EnglishUniversity Students
C12
63 句
Lean Into Imposter Syndrome, Don't Give In to It
Business EnglishUniversity StudentsWorking Adults
C18
324 句
Distributed Task Scheduler: System Design Interview (Stripe & Amazon Offers)
Business EnglishInterview EnglishUniversity Students
C1162 句
Incident Management Process: A Step by Step guide
Business EnglishInterview EnglishUniversity Students
C17
47 句
The most interesting "hack" in history...
American AccentBusiness EnglishUniversity StudentsWorking Adults
C12
51 句
Cloud Models - CompTIA Network+ N10-009 - 1.3
Business EnglishUniversity StudentsWorking Adults
C12
188 句
IT System Administrator Interview Questions and Answers | How to Pass an IT System Admin Interview
Business EnglishInterview EnglishUniversity Students
![How Bad Is Your Attention Span? (self test) [CC]](https://img.youtube.com/vi/m13DD61-dy8/mqdefault.jpg)
C12
74 句
How Bad Is Your Attention Span? (self test) [CC]
Business EnglishUniversity StudentsWorking Adults
C135
16 句
Tầm nhìn chiến lược: Yếu tố tạo nên khác biệt trong hành trình thành công
IELTS PrepBusiness EnglishUniversity Students
C11
519 句
Traceability 101: An Introduction to Food Supply Chain Traceability
Business EnglishUniversity StudentsWorking Adults
這支影片適合誰？
這支講解MITRE ATT&CK框架的影片適合有一定英語基礎、想提升專業領域聽說能力的學習者。不論是準備雅思口語的考生，還是想通過「看YouTube學英語」鍛煉實用表達的上班族，都能從中收穫。影片語速中等，術語與日常表達結合，非常適合「英語影子跟讀」練習，幫助養成自然的語流節奏。
值得借鑑的詞彙與短語
- lurk on networks：潛伏在網路中。可用於描述網路攻擊者或隱藏的風險，如「Hackers often lurk on public Wi-Fi networks.」
- escalate privileges：提升許可權。技術領域常用，也可引申為「升級職責」，例如「He managed to escalate his privileges by completing the project.」
- correlate specific adversaries：關聯特定敵手。「correlate」強調邏輯聯絡，口語中可替換為「link」，但正式場合更顯專業。
如何練好口音？
影片講者發音清晰，重點在於重讀關鍵名詞（如「ATT&CK framework」「adversary groups」）和語調遞進。練習時可採用「英語影子跟讀」法：播放一句，暫停並模仿，注意「mitigate」中「i」的短音（類似「米」）和「exfiltration」的重音在第三音節。對於長句，先拆分意群（如「Armed with this knowledge, / you can better understand...」），再逐步跟上。這類練習不僅提升發音，還能鍛煉雅思口語所需的流暢度。堅持「shadowspeak」，一週即可感受到語速與語感的進步。
結合「看YouTube學英語」的資源，每天抽取10分鐘針對影片進行「英語口語練習」，既能積累專業詞彙，又能最佳化口音，可謂一舉多得。
影片中的語法
說話人最常用的結構，並附上影片中的原話：
| 結構 | 影片中的用法 |
|---|---|
| 被動語態 be + 過去分詞 — 強調發生了什麼，而不是誰做的 | been reported · are configured · being employed |
| 現在完成時 have/has + 過去分詞 — 過去發生但與現在仍有關聯的事 | It's been reported · have conducted |
什麼是跟讀法？
跟讀法 (Shadowing) 是一種有科學依據的語言學習技巧，最初開發用於專業口譯員的培訓，並由多語言者Alexander Arguelles博士普及。這個方法簡單而強大：您在聽英語母語原聲的同時立即大聲重複——就像是一個延遲1-2秒緊跟說話者的影子。與被動聽力或語法練習不同，跟讀法強迫您的大腦和口腔肌肉同時處理並模模擬實的講話模式。研究表明它能顯著提高發音準確性，語調，節奏，連讀，聽力理解和口語流利度——使其成為雅思口語備考和真實英語交流最有效的方法之一。