Publication Date

Spring 4-29-2026

School

Center for Computer and Information Technology; School of Business; School of Engineering and Computational Sciences

Major

Computer Science

Keywords

adversarial emulation, blue team, red team, purple team, framework

Disciplines

Cybersecurity | Information Security | OS and Networks | Software Engineering | Systems Architecture

Abstract

Currently, the leading technologies in the market of adversarial emulation are MITRE Caldera, Atomic Red Team by IBM, and multiple proprietary products that come with support packages for different vendors like AttackIQ, Cymulate, SafeBreach, and many more. While it is clear that much work has been done in the broad category of adversarial emulation, when it comes to open source solutions, there are no agentless options with built in automation and modularity that have good support for cloud environments. Agentless adversarial emulation provides a unique advantage in that it can be both simpler and a better representation of the true security posture of a network and its incident response capabilities. Testing an exploit or checking for its theoretical feasibility can never substitute for actually carrying out the attack. A simulated attack should be as close to reality as possible for the benefit of the team that is training to detect and stop it. When an attack is really being carried out, defenders can tell in real time if their hardening approach has been effective or not.

Download

Share

COinS