Authoritative Readings and Resources

These resources extend the supplied learning chapters in AINS6300 AI in Threat Detection. They were selected because they are primary standards, official documentation, open textbooks, or authoritative institutional guidance—not unsourced link lists.

How to Read Them

For each module, read the supplied chapter first. Then use the two linked resources at the end of that chapter to test terminology, compare the course’s worked example with an authoritative treatment, and identify one point that should change or qualify your recommendation. Students are not expected to read every linked document cover to cover.

1. MITRE ATT&CK

Adversary behaviors, techniques, detections, and mitigations.

Use with: Security telemetry and threat models, Threat intelligence and enrichment, Detection engineering and evaluation, Threat detection portfolio.

2. NIST Cybersecurity Framework 2.0

Cybersecurity outcomes and governance.

Use with: Security telemetry and threat models, Anomaly detection foundations, Detection engineering and evaluation, Adversarial behavior and evasion.

3. CISA Cybersecurity Resources

Operational guidance, advisories, and defensive tools.

Use with: Anomaly detection foundations, Malware and network behavior analysis, Adversarial behavior and evasion, Security operations integration.

4. MITRE ATLAS

Adversarial threats to AI-enabled systems.

Use with: Malware and network behavior analysis, Threat intelligence and enrichment, Security operations integration, Threat detection portfolio.

Source-Use Standard

Assignments should distinguish among measured notebook evidence, course-provided synthetic evidence, claims supported by these sources, and the student’s own professional judgment. Cite the specific page, section, control, or documentation topic used; a bare homepage link is not adequate evidence.