A Survey on Cyber Resilience: Key Strategies, Research Challenges, and Future Directions

Abstract

Cyber resilience has become a major concern for both academia and industry due to the increasing number of data breaches caused by the expanding attack surface of existing IT infrastructure. Cyber resilience refers to an organisation’s ability to prepare for, absorb, recover from, and adapt to adverse effects typically caused by cyber-attacks that affect business operations. In this survey, we aim to identify the significant domains of cyber resilience and measure their effectiveness. We have selected these domains based on a literature review of frameworks, strategies, applications, tools, and technologies. We have outlined the cyber resilience requirements for each domain and explored solutions related to each requirement in detail. We have also compared and analysed different studies in each domain to find other ways of enhancing cyber resilience. Furthermore, we have compared cyber resilience frameworks and strategies based on technical requirements for various applications. We have also elaborated on techniques for improving cyber resilience. In the supplementary section, we have presented applications that have implemented cyber resilience. This survey comprehensively compares various popular cyber resilience tools to help researchers, practitioners, and organisations choose the best practices for enhancing cyber resilience. Finally, we have shared key findings, limitations, problems, and future directions.

Towards a Cyber Resilience Quantification Framework (Crqf) for it Infrastructure

“…Cyber resilience refers to resisting and recovering from cyber-attacks. Measuring and evaluating a system or organisation's ability to withstand and recover from cyber-attacks can be quantified, as defined in [5] and [6]. Other definitions of cyber resilience focus on the organisational or system levels.…”