Abstract-The concept of a common operational picture has been utilized by the military for situational awareness in warfare domains for many years. With the emergence of cyberspace as a domain, there is a necessity to develop doctrine and tools to enable situational awareness for key-decision makers. Our study analyzes key elements that define cyber situational awareness to develop a methodology to identify assets within key cyber terrain, thus enabling situational awareness at the tactical level. For the purposes of this work, we treat critical assets to be key cyber terrain, given that no formal study has determined differences between asset criticality and key cyber terrain. Mission-and operationallybased questions are investigated to identify critical assets with the TOPSIS methodology. Results show that the ICS system can be evaluated using TOPSIS to identify critical assets contributing to key cyber terrain, enabling further research into other interconnected systems.
Risk is integrated into all business processes, and leaders work to limit risk to as low as reasonable within their systems. Within Industrial Control System networks, risk is especially challenging due to the second-and third-order effects that an attack can incur. We present a new equation for risk and analyze its appropriateness in determining risk through Monte Carlo methods. We believe that this new equation has merit in allowing leadership to more quickly access and mitigate risk based off factors within the decision maker's control, understanding how capable an attacker may be, how much impact an attack would have on the system, and how intensely an attacker may want to cause damage to the system. These variables will allow a leader to provide strategic vision to the business that he/she leads.
scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.
hi@scite.ai
10624 S. Eastern Ave., Ste. A-614
Henderson, NV 89052, USA
Copyright © 2024 scite LLC. All rights reserved.
Made with 💙 for researchers
Part of the Research Solutions Family.