跟读练习: MITRE ATT&CK® Framework - 通过视频学习英语口语
正在创建课程...
1
It's been reported that once an organization is breached, adversaries typically lurk on networks for months before being detected.
2
How did they get in?
3
How are they moving around?
4
What are they doing?
5
So where do you start?
6
MITRE's ATT&CK framework describes how adversaries penetrate networks and then move laterally, escalate privileges, and generally evade your defenses.
7
ATT&CK looks at the problem from the perspective of the adversary, what goals they are trying to achieve, and what specific methods they use.
8
ATT&CK organizes adversary behaviors into a series of tactics, specific technical objectives that an attacker wants to achieve.
9
Some examples of tactics include defense evasion, lateral movement, and exfiltration.
10
Within each tactic category, attack defines a series of techniques.
11
Each technique describes one way an adversary may try to achieve that objective.
12
There are multiple techniques within each tactic
13
because adversaries may use different methods based on their own expertise
14
or things like the availability of tools or how your systems are configured.
15
Each technique defined in attack includes a description of the method used by the adversary, the systems or platforms it applies to,
16
and where known, what specific adversary groups use this technique.
17
Techniques also describe ways to mitigate the behavior, along with any published references to the technique being employed.
18
ATT&CK helps you understand how adversaries might operate so you can plan how to detect or stop that behavior.
19
Armed with this knowledge, you can better understand the different ways an adversary prepares for, launches, and executes their attacks.
20
Another important use of ATT&CK is to help you detect an adversary's actions.
21
The ATT&CK framework includes resources designed to help you develop analytics that detect the techniques used by an adversary.
22
ATT&CK also maintains a library of information about selected adversary groups and the campaigns they have conducted.
23
And since ATT&CK is based on real-world observations, it allows you to correlate specific adversaries and the techniques they've used.
24
Because adversaries often use different techniques to attack different platforms and technologies, the ATT&CK framework is divided into a series of technology domains.
25
currently covered by ATT&CK include enterprise networks with Windows and Linux operating systems and mobile devices.
26
The ATT&CK framework can help your organization better understand the techniques specific adversaries are likely to use,
27
information you can use to evaluate your defenses and strengthen them where it matters most.
28
MITRE is building a community around ATT&CK so that experts in different domains
29
and technologies can come together to refine and extend the knowledge contained in the framework.
30
And because MITRE is a not-for-profit organization operating in the public interest, we can provide a conflict-free environment to create,
31
collect, share, and manage this information, making it available to everyone.
32
Learn more about ATT&CK and what else we're doing in cyber threat intelligence.
33
MITRE.
34
We solve problems for a safer world.
✨ 推荐视频
C130 句
7 Phases of Penetration Testing Explained | Think your system is safe? #cybersecurity #pentesting
Business EnglishUniversity StudentsWorking Adults
C13
10 句
The Data-Driven Decision Framework Every Marketer Needs
Business EnglishUniversity StudentsWorking Adults
C11
53 句
Google Threat Intelligence Platform Overview
Business EnglishUniversity StudentsWorking Adults
C11
333 句
Master n8n Triggers in 20 Minutes – Automate Anything
Business EnglishUniversity StudentsWorking Adults
C11
346 句
Trust the Process: How to Design Teams That Actually Work
Business EnglishUniversity StudentsWorking Adults
C11
207 句
How I Made $30,000 Hacking Broken Access Control
Business EnglishUniversity StudentsWorking Adults
C13
111 句
Executing Monitoring, Evaluation and Learning (MEAL) | Complete Practical Guide
Business EnglishUniversity StudentsWorking Adults
C12
82 句
CAP Theorem Simplified
Business EnglishUniversity StudentsWorking Adults
C13
360 句
Terraform Scenario Based Interview Questions and Answers | DevOps Interview
Business EnglishInterview EnglishUniversity Students
B24
164 句
Retired Navy SEAL Explains How to Prepare for Dangerous Situations | Tradecraft | WIRED
Business EnglishUniversity StudentsWorking Adults
C11
60 句
Course Preview | SC-100 | Microsoft Cybersecurity Architect
Cambridge Exam PrepBusiness EnglishUniversity Students
B21
17 句
🔥They Studied Your Weaknesses
Business EnglishUniversity StudentsWorking Adults
這支影片適合誰？
這支講解MITRE ATT&CK框架的影片適合有一定英語基礎、想提升專業領域聽說能力的學習者。不論是準備雅思口語的考生，還是想通過「看YouTube學英語」鍛煉實用表達的上班族，都能從中收穫。影片語速中等，術語與日常表達結合，非常適合「英語影子跟读」練習，幫助養成自然的語流節奏。
值得借鑑的詞彙與短語
- lurk on networks：潛伏在網絡中。可用於描述網絡攻擊者或隱藏的風險，如「Hackers often lurk on public Wi-Fi networks.」
- escalate privileges：提升權限。技術領域常用，也可引申為「升級職責」，例如「He managed to escalate his privileges by completing the project.」
- correlate specific adversaries：關聯特定敵手。「correlate」強調邏輯聯繫，口語中可替換為「link」，但正式場合更顯專業。
如何練好口音？
影片講者發音清晰，重點在於重讀關鍵名詞（如「ATT&CK framework」「adversary groups」）和語調遞進。練習時可採用「英語影子跟读」法：播放一句，暫停並模仿，注意「mitigate」中「i」的短音（類似「米」）和「exfiltration」的重音在第三音節。對於長句，先拆分意群（如「Armed with this knowledge, / you can better understand...」），再逐步跟上。這類練習不僅提升發音，還能鍛煉雅思口語所需的流暢度。堅持「shadowspeak」，一周即可感受到語速與語感的進步。
結合「看YouTube學英語」的資源，每天抽取10分鐘針對影片進行「英语口语练习」，既能積累專業詞彙，又能優化口音，可謂一舉多得。
什么是跟读法？
跟读法 (Shadowing) 是一种有科学依据的语言学习技巧，最初开发用于专业口译员的培训，并由多语言者Alexander Arguelles博士普及。这个方法简单而强大：您在听英语母语原声的同时立即大声重复——就像是一个延迟1-2秒紧跟说话者的影子。与被动听力或语法练习不同，跟读法强迫您的大脑和口腔肌肉同时处理并模仿真实的讲话模式。研究表明它能显着提高发音准确性，语调，节奏，连读，听力理解和口语流利度——使其成为雅思口语备考和真实英语交流最有效的方法之一。