Towards an Organizationally-Relevant Quantification of Cyber Resilience

Simple item page
dc.contributor.authorLlanso, Thomas
dc.contributor.authorMcneil, Martha
dc.date.accessioned2020-12-24T20:28:24Z
dc.date.available2020-12-24T20:28:24Z
dc.date.issued2021-01-05
dc.description.abstractGiven the difficulty of fully securing complex cyber systems, there is growing interest in making cyber systems resilient to the cyber threat. However, quantifying the resilience of a system in an organizationally-relevant manner remains a challenge. This paper describes initial research into a novel metric for quantifying the resilience of a system to cyber threats called the Resilience Index (RI). We calculate the RI via an effects-based discrete event stochastic simulation that runs a large number of trials over a designated mission timeline. During the trials, adverse cyber events (ACEs) occur against cyber assets in a target system. We consider a trial a failure if an ACE causes the performance of any of the target system’s mission essential functions (MEFs) to fall below its assigned threshold level. Once all trials have completed, the simulator computes the ratio of successful trials to the total number of trials, yielding RI. The linkage of ACEs to MEFs provides the organizational tie.
dc.format.extent10 pages
dc.identifier.doi10.24251/HICSS.2021.849
dc.identifier.isbn978-0-9981331-4-0
dc.identifier.urihttp://hdl.handle.net/10125/71470
dc.language.isoEnglish
dc.relation.ispartofProceedings of the 54th Hawaii International Conference on System Sciences
dc.rightsAttribution-NonCommercial-NoDerivatives 4.0 International
dc.rights.urihttps://creativecommons.org/licenses/by-nc-nd/4.0/
dc.subjectCyber Systems: Their Science, Engineering, and Security
dc.subjectcyber risk resilience quantification
dc.titleTowards an Organizationally-Relevant Quantification of Cyber Resilience
prism.startingpage7065

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
0691.pdf
Size:
1.29 MB
Format:
Adobe Portable Document Format
Download

Collections

Cyber Systems: Their Science, Engineering, and Security