Towards a Research Agenda for Cyber Friendly Fire

Greitzer, Frank L.; Clements, Samuel L.; Carroll, Thomas E.; Fluckiger, Jerry D.

doi:10.2172/983437

Cited by 3 publications

(6 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The concept of cyber FF is similar in many respects to combat friendly fire [3], and like combat friendly fire, a fundamental cognitive issue lies in maintaining situation awareness (SA). In addition, cyber FF is closely related to some aspects of insider threat, especially when viewed within the broad framework of cyber security failures.…”

Section: Cognitive Approaches To Cyber Friendly Fire Researchmentioning

confidence: 99%

See 1 more Smart Citation

Security informatics research challenges for mitigating cyber friendly fire

Carroll

Greitzer²,

Roberts

2014

Secur Inform

View full text Add to dashboard Cite

This paper addresses cognitive implications and research needs surrounding the problem of cyber friendly fire (FF). We define cyber FF as intentional offensive or defensive cyber/electronic actions intended to protect cyber systems against enemy forces or to attack enemy cyber systems, which unintentionally harms the mission effectiveness of friendly or neutral forces. We describe examples of cyber FF and discuss how it fits within a general conceptual framework for cyber security failures. Because it involves human failure, cyber FF may be considered to belong to a sub-class of cyber security failures characterized as unintentional insider threats. Cyber FF is closely related to combat friendly fire in that maintaining situation awareness (SA) is paramount to avoiding unintended consequences. Cyber SA concerns knowledge of a system's topology (connectedness and relationships of the nodes in a system), and critical knowledge elements such as the characteristics and vulnerabilities of the components that comprise the system and its nodes, the nature of the activities or work performed, and the available defensive and offensive countermeasures that may be applied to thwart network attacks. We describe a test bed designed to support empirical research on factors affecting cyber FF. Finally, we discuss mitigation strategies to combat cyber FF, including both training concepts and suggestions for decision aids and visualization approaches.

show abstract

Section: Cognitive Approaches To Cyber Friendly Fire Researchmentioning

confidence: 99%

“…An initial proposed definition of cyber FF, from Greitzer et al [3], emphasizes three key characteristics:…”

Section: Introductionmentioning

confidence: 99%

Security informatics research challenges for mitigating cyber friendly fire

Carroll

Greitzer²,

Roberts

2014

Secur Inform

View full text Add to dashboard Cite

show abstract

“…The concept of cyber FF is similar in many respects to combat friendly fire [1], and from a cognitive perspective, the fundamental issue is with maintaining situation awareness (SA). The scientific literature on SA is substantial and no attempt is made here to report exhaustively on this topic.…”

Section: Cognitive Approaches To Cyber Friendly Fire Researchmentioning

confidence: 99%

“…To date there have been two published definitions of cyber FF. The first, from Greitzer et al [1], is:…”

Section: Introductionmentioning

confidence: 99%

Cyber friendly fire: Research challenges for security informatics

Greitzer¹,

Carroll

Roberts

2013

2013 IEEE International Conference on Intelligence and Security Informatics

Self Cite

View full text Add to dashboard Cite

This paper addresses cognitive implications and research needs surrounding the problem of cyber friendly fire (FF). We define cyber FF as intentional offensive or defensive cyber/electronic actions intended to protect cyber systems against enemy forces or to attack enemy cyber systems, which unintentionally harms the mission effectiveness of friendly or neutral forces. Just as with combat friendly fire, maintaining situation awareness (SA) is paramount to avoiding cyber FF incidents. Cyber SA concerns knowledge of a system's topology (connectedness and relationships of the nodes in a system), and critical knowledge elements such as the characteristics and vulnerabilities of the components that comprise the system and its nodes, the nature of the activities or work performed, and the available defensive and offensive countermeasures that may be applied to thwart network attacks. Mitigation strategies to combat cyber FFincluding both training concepts and suggestions for decision aids and visualization approaches-are discussed.

show abstract

“…To date there have been two published definitions of cyber FF. The first, from Greitzer et al (Greitzer, Clements et al 2009), is:…”

Section: Introductionmentioning

confidence: 99%