DTM™
January 10, 2024
Price-Oquindo
Type: TECHNICAL GUIDE
Attribution: DTM (Dynamic Threat Mitigation) designed by Dr. Todd M. Price. CART (Continuous Automated Red-Teaming) and PQE (Post-Quantum Engineering) built into the SaaS platform by Price-Oquindo.
Scope & Goals
- Run continuous, automated adversary simulations across priority kill chains.
- Produce gating signals for promotions and evidence for audits.
- Detect drift and regressions after changes (including PQC toggles).
Architecture
- Scenario Orchestrator: Schedules techniques and tracks outcomes.
- Agent Fleet: Executes payloads in controlled environments (canary/staging/prod-shadow).
- Signal Bus: Ships results to DTM Evidence Lake + dashboards.
- Policy Bridge: Enforces gates (pass/fail thresholds) in CI/CD.
Scenarios & Techniques
Initial Access
Credential stuffing, token replay, TLS downgrade attempts.
Lateral Movement
Service account abuse, mTLS misconfig, secret discovery.
Objective
Data exfil, integrity attacks on code-signing / supply chain.
Rollout Steps
- Define critical assets and hypothesize attack paths.
- Author scenarios with measurable success criteria and safeties.
- Integrate with CI/CD: pre-prod gates; prod canary monitors.
- Set thresholds and auto-rollback triggers.
- Publish evidence packs; iterate based on incidents/SLOs.
Governance & Safety
- Change control for scenario updates; separation of duties for authors vs. approvers.
- Legal/ethical review for simulated traffic and data handling.
- Kill-switch and containment for runaway scenarios.
TECHNICAL DOCUMENTATION | Aegis Project — CART Implementation Guide