Home  >  ICS TRITON  >  Operational Flow


TRITON Evaluation: Operational Flow



The Operational Flow separated technique execution into sequences we referred to as “Steps”, which are grouped in higher-level abstractions called “Phases”. Organizing our execution into Phases and Steps ensured that the detection displayed was correctly associated with the technique that was being tested. Each Step corresponded to an adversary’s intended goal during an operation.