framework

Cloud Web Applications Threat Matrix

Microsoft-authored catalogue of attack techniques against cloud-hosted web applications and serverless platforms, arranged by MITRE ATT&CK tactic from Resource Development through Impact.

Known aliases

cloud web applications threat matrix

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 publisher

Microsoft maps stale DNS and commit rights into one cloud web app attack surface

The new cloud web applications threat matrix sorts eleven ATT&CK tactics for managed runtimes and serverless code, starting with assets an app team rarely owns, such as dead DNS records and linked source repositories.

Publishers:microsoft.com

Reality

Evidence74
Adoption: Insufficient
Hype gap+6
Incentives58
Confidence67