In the face of increasing security threats and attacks, the Blue Team serves as the frontline of enterprise security, responsible for establishing security measures, monitoring abnormal situations, and swiftly responding and recovering. However, enterprises often struggle to effectively assess the overall effectiveness of their defense detection and resilience capabilities.

This program will share best practices and case studies from overseas on Blue Team strengthening, including how to apply attack simulation strategies and resilience assessment frameworks. It will cover resources such as the MITRE ATT&CK framework, Adversary Emulation Library, MITRE Caldera, ENISA CSIRT Maturity Framework, and more. These methods can assist enterprises in formulating future security enhancement blueprints to enhance overall security and resilience.