Visible to the public Experimentation Support for Cyber Security Evaluations

TitleExperimentation Support for Cyber Security Evaluations
Publication TypeConference Paper
Year of Publication2016
AuthorsAtighetchi, Michael, Simidchieva, Borislava, Carvalho, Marco, Last, David
Conference NameProceedings of the 11th Annual Cyber and Information Security Research Conference
Conference LocationNew York, NY, USA
ISBN Number978-1-4503-3752-6
Keywordsattack vectors, cyber security analysis, Cyber Test Range, Human Behavior, Modeling, pubcrawl, resilience, Scalability, Threat Assessment
AbstractTo improve the information assurance of mission execution over modern IT infrastructure, new cyber defenses need to not only provide security benefits, but also perform within a given cost regime. Current approaches for validating and integrating cyber defenses heavily rely on manual trial-and-error, without a clear and systematic understanding of security versus cost tradeoffs. Recent work on model-based analysis of cyber defenses has led to quantitative measures of the attack surface of a distributed system hosting mission critical applications. These metrics show great promise, but the cost of manually creating the underlying models is an impediment to their wider adoption. This paper describes an experimentation framework for automating multiple activities associated with model construction and validation, including creating ontological system models from real systems, measuring and recording distributions of resource impact and end-to-end performance overhead values, executing real attacks to validate theoretic attack vectors found through analytic reasoning, and creating and managing multi-variable experiments.
Citation Keyatighetchi_experimentation_2016