research-article

Public Access

Action Recommendation for Cyber Resilience

Authors:

Indrajit RayAuthors Info & Claims

SafeConfig '15: Proceedings of the 2015 Workshop on Automated Decision Making for Active Cyber Defense

Pages 3 - 8

https://doi.org/10.1145/2809826.2809837

Published: 12 October 2015 Publication History

PDF eReader

Abstract

This paper presents an unifying graph-based model for representing the infrastructure, behavior and missions of an enterprise. We describe how the model can be used to achieve resiliency against a wide class of failures and attacks. We introduce an algorithm for recommending resilience establishing actions based on dynamic updates to the models. Without loss of generality, we show the effectiveness of the algorithm for preserving latency based quality of service (QoS). Our models and the recommendation algorithms are implemented in a software framework that we seek to release as an open source framework for simulating resilient cyber systems.

References

[1]

A. Beck and M. Teboulle. A fast iterative shrinkage-thresholding algorithm for linear inverse problems. SIAM journal on imaging sciences, 2(1):183--202, 2009.

Digital Library

Google Scholar

[2]

H. Chan, L. Akoglu, and H. Tong. Make it or break it: Manipulating robustness in large networks. SIAM, 2014.

Google Scholar

[3]

R. Dewri, I. Ray, N. Poolsappasit, and D. Whitley. Optimal security hardening on attack tree models of networks: a cost-benefit analysis. International Journal of Information Security, 11(3):167--188, 2012.

Digital Library

Google Scholar

[4]

Y. Hu, W. Wang, X. Gong, X. Que, and S. Cheng. On reliability-optimized controller placement for software-defined networks. Communications, China, 2014.

Google Scholar

[5]

I. Linkov, D. A. Eisenberg, K. Plourde, T. P. Seager, J. Allen, and A. Kott. Resilience metrics for cyber systems. Environment Systems and Decisions, 33(4):471--476, 2013.

Crossref

Google Scholar

[6]

H. Okhravi, J. Riordan, and K. Carter. Quantitative evaluation of dynamic platform techniques as a defensive mechanism. In Research in Attacks, Intrusions and Defenses. Springer, 2014.

Google Scholar

[7]

W. Peng, F. Li, C.-T. Huang, and X. Zou. A moving-target defense strategy for cloud-based services with heterogeneous and dynamic attack surfaces. In Communications (ICC), 2014 IEEE International Conference on. IEEE, 2014.

Crossref

Google Scholar

[8]

P. Ramuhalli, M. Halappanavar, J. Coble, and M. Dixit. Towards a theory of autonomous reconstitution of compromised cyber-systems. In Technologies for Homeland Security (HST), 2013 IEEE International Conference on. IEEE, 2013.

Crossref

Google Scholar

[9]

J. Xu, P. Guo, M. Zhao, R. F. Erbacher, M. Zhu, and P. Liu. Comparing different moving target defense techniques. In Proceedings of the First ACM Workshop on Moving Target Defense, pages 97--107. ACM, 2014.

Digital Library

Google Scholar

Cited By

View all

Alhidaifi SAsghar MAnsari I(2024)A Survey on Cyber Resilience: Key Strategies, Research Challenges, and Future DirectionsACM Computing Surveys10.1145/364921856:8(1-48)Online publication date: 26-Apr-2024
https://dl.acm.org/doi/10.1145/3649218
Tzavara VVassiliadis S(2024)Tracing the evolution of cyber resilience: a historical and conceptual reviewInternational Journal of Information Security10.1007/s10207-023-00811-x23:3(1695-1719)Online publication date: 1-Feb-2024
https://doi.org/10.1007/s10207-023-00811-x
Safitra MLubis MFakhrurroja H(2023)Counterattacking Cyber Threats: A Framework for the Future of CybersecuritySustainability10.3390/su15181336915:18(13369)Online publication date: 6-Sep-2023
https://doi.org/10.3390/su151813369
Show More Cited By

Index Terms

Action Recommendation for Cyber Resilience
1. Mathematics of computing
  1. Information theory

Recommendations

DEMO: Action Recommendation for Cyber Resilience
CCS '15: Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security

We demonstrate an unifying graph-based model for representing the infrastructure, behavior and missions of an enterprise. We introduce an algorithm for recommending resilience establishing actions based on dynamic updates to the models and show its ...
Cyber Resilience-by-Construction: Modeling, Measuring & Verifying
SafeConfig '15: Proceedings of the 2015 Workshop on Automated Decision Making for Active Cyber Defense

The need of cyber security is increasing as cyber attacks are escalating day by day. Cyber attacks are now so many and sophisticated that many will unavoidably get through. Therefore, there is an immense need to employ resilient architectures to defend ...
Tracing the evolution of cyber resilience: a historical and conceptual review
Abstract
In 2000, during a time when cyber security research was focused on the risks and threats posed by digital systems, the notion of being able to withstand and recover from cyber attacks, also known as cyber resilience, emerged. Recently, this ...

Comments

Information & Contributors

Information

Published In

SafeConfig '15: Proceedings of the 2015 Workshop on Automated Decision Making for Active Cyber Defense

October 2015

112 pages

ISBN:9781450338219

DOI:10.1145/2809826

Program Chairs:
Ehab Al-Shaer
University of North Carolina at Charlotte, USA
,
Christopher Oehmen
Pacific Northwest National Laboratory, USA
,
Mohammad Ashiqur Rahman
Tennessee Tech University, USA

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 12 October 2015

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Research-article

Funding Sources

Pacific Northwest National Laboratory

Conference

CCS'15

Sponsor:

SIGSAC

CCS'15: The 22nd ACM Conference on Computer and Communications Security

October 12, 2015

Colorado, Denver, USA

Acceptance Rates

SafeConfig '15 Paper Acceptance Rate 8 of 27 submissions, 30%;

Overall Acceptance Rate 22 of 61 submissions, 36%

Upcoming Conference

CCS '25

Sponsor:
sigsac

ACM SIGSAC Conference on Computer and Communications Security

October 13 - 17, 2025

Taipei , Taiwan

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

11
Total Citations
View Citations
912
Total Downloads

Downloads (Last 12 months)81
Downloads (Last 6 weeks)9

Reflects downloads up to 27 Dec 2024

Other Metrics

View Author Metrics

Citations

Cited By

View all

Alhidaifi SAsghar MAnsari I(2024)A Survey on Cyber Resilience: Key Strategies, Research Challenges, and Future DirectionsACM Computing Surveys10.1145/364921856:8(1-48)Online publication date: 26-Apr-2024
https://dl.acm.org/doi/10.1145/3649218
Tzavara VVassiliadis S(2024)Tracing the evolution of cyber resilience: a historical and conceptual reviewInternational Journal of Information Security10.1007/s10207-023-00811-x23:3(1695-1719)Online publication date: 1-Feb-2024
https://doi.org/10.1007/s10207-023-00811-x
Safitra MLubis MFakhrurroja H(2023)Counterattacking Cyber Threats: A Framework for the Future of CybersecuritySustainability10.3390/su15181336915:18(13369)Online publication date: 6-Sep-2023
https://doi.org/10.3390/su151813369
Elsayed ECheng YChen X(2022)Reliability and Resilience Modeling and QuantificationObjective Resilience10.1061/9780784415894.ch2(17-79)Online publication date: 8-Apr-2022
https://doi.org/10.1061/9780784415894.ch2
Soikkeli JMuñoz-González LLupu E(2019)Efficient Attack Countermeasure Selection Accounting for Recovery and Action CostsProceedings of the 14th International Conference on Availability, Reliability and Security10.1145/3339252.3339270(1-10)Online publication date: 26-Aug-2019
https://dl.acm.org/doi/10.1145/3339252.3339270
Chen PChoudhury SRodriguez LHero ARay I(2019)Toward Cyber-Resiliency Metrics for Action Recommendations Against Lateral Movement AttacksIndustrial Control Systems Security and Resiliency10.1007/978-3-030-18214-4_5(71-92)Online publication date: 30-Aug-2019
https://doi.org/10.1007/978-3-030-18214-4_5
Jacobs NHossain-McKenzie SVugrin E(2018)Measurement and Analysis of Cyber Resilience for Control Systems: An Illustrative Example2018 Resilience Week (RWS)10.1109/RWEEK.2018.8473549(38-46)Online publication date: Aug-2018
https://doi.org/10.1109/RWEEK.2018.8473549
Applebaum AJohnson SLimiero MSmith M(2018)Playbook Oriented Cyber Response2018 National Cyber Summit (NCS)10.1109/NCS.2018.00007(8-15)Online publication date: Jun-2018
https://doi.org/10.1109/NCS.2018.00007
Evans NHorsthemke W(2018)Active Defense TechniquesCyber Resilience of Systems and Networks10.1007/978-3-319-77492-3_10(221-246)Online publication date: 30-May-2018
https://doi.org/10.1007/978-3-319-77492-3_10
Mehta VRowe PLewis GMagalhaes AKochenderfer M(2016)Decision-theoretic approach to designing cyber resilient systems2016 IEEE 15th International Symposium on Network Computing and Applications (NCA)10.1109/NCA.2016.7778634(302-309)Online publication date: Oct-2016
https://doi.org/10.1109/NCA.2016.7778634
Show More Cited By

View Options

View options

PDF

View or Download as a PDF file.

PDF

eReader

View online with eReader.

eReader

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Cited By

Index Terms

Recommendations

DEMO: Action Recommendation for Cyber Resilience

Cyber Resilience-by-Construction: Modeling, Measuring & Verifying

Tracing the evolution of cyber resilience: a historical and conceptual review

Comments

Published In

Sponsors

Publisher

Publication History

Permissions

Check for updates

Author Tags

Qualifiers

Funding Sources

Conference

Acceptance Rates

Upcoming Conference

Other Metrics

Article Metrics

Other Metrics

Cited By

PDF

eReader

Login options

Full Access

Abstract

References

Cited By

Index Terms

Recommendations

DEMO: Action Recommendation for Cyber Resilience

Cyber Resilience-by-Construction: Modeling, Measuring & Verifying

Tracing the evolution of cyber resilience: a historical and conceptual review

Comments

Information

Published In

Sponsors

Publisher

Publication History

Permissions

Check for updates

Author Tags

Qualifiers

Funding Sources

Conference

Acceptance Rates

Upcoming Conference

Contributors

Other Metrics

Bibliometrics

Article Metrics

Other Metrics

Citations

Cited By

View options

PDF

eReader

Login options

Full Access

Figures

Other

Share

Share this Publication link

Share on social media

Affiliations