Visible to the public Quantifying cyber-resilience against resource-exhaustion attacks

TitleQuantifying cyber-resilience against resource-exhaustion attacks
Publication TypeConference Paper
Year of Publication2014
AuthorsFink, G.A., Griswold, R.L., Beech, Z.W.
Conference NameResilient Control Systems (ISRCS), 2014 7th International Symposium on
Date PublishedAug
Keywordscyber security, cyber systems, cyber-resilience quantification, engineering terms, information science, information sciences, Information systems, linguistic terms, material science, mechanical engineering, networked queuing systems, Queueing analysis, queueing theory, queuing theory, resilience, resource-exhaustion attacks, security of data, Servers, simple queuing system, Strain, Stress, stress-strain curve

Resilience in the information sciences is notoriously difficult to define much less to measure. But in mechanical engineering, the resilience of a substance is mathematically well-defined as an area under the stress-strain curve. We combined inspiration from mechanics of materials and axioms from queuing theory in an attempt to define resilience precisely for information systems. We first examine the meaning of resilience in linguistic and engineering terms and then translate these definitions to information sciences. As a general assessment of our approach's fitness, we quantify how resilience may be measured in a simple queuing system. By using a very simple model we allow clear application of established theory while being flexible enough to apply to many other engineering contexts in information science and cyber security. We tested our definitions of resilience via simulation and analysis of networked queuing systems. We conclude with a discussion of the results and make recommendations for future work.

Citation Key6900093