Improving Threat Mitigation Through a Cybersecurity Risk Management Framework: A Computational Design Science Approach

The authors built a tool called ATT&CK-Link that automatically connects threats discussed in underground hacker forums to MITRE ATT&CK, a widely used catalog of attacker tactics. By folding in data drawn directly from hackers, the system gives security teams earlier, more actionable warnings about emerging threats. The paper shows how an organization such as a hospital could use it to defend its systems before an attack lands.