Show simple item record

dc.contributor.advisorKrautheim, John
dc.contributor.advisorMcGrath, Garrett
dc.contributor.authorBerninger, Matthew L.
dc.dateJune 2014
dc.date.accessioned2014-08-13T20:17:25Z
dc.date.available2014-08-13T20:17:25Z
dc.date.issued2014-06
dc.identifier.urihttp://hdl.handle.net/10945/42581
dc.descriptionCHDS State/Localen_US
dc.description.abstractAs companies seek protection from cyber attacks, justifying proper levels of investment in cyber security is essential. Like all investments, cyber defense costs must be weighed against their expected benefits. While some cyber investment models exist that can relate costs and benefits, these models are largely untested with experimental data. This research develops an experimental framework and statistics for testing and measuring the efficacy of cyber mitigation methods, such that they can be integrated into existing cyber investment models. This work surveys cyber security investment models and frameworks. Using cyber exercises as a source of attack data, types of exercises and how information is recorded was studied. A proof of concept for an experimental framework able to record statistics on cyber exercise attacks and defenses was developed. The environment is intended to resemble that of an actual cyber attack, and to collect attack and defense data in a repeatable and technology-agnostic manner. Possible future work could illuminate mathematical relationships between threat and mitigation. Statistics and procedures are proposed that are applicable to the specific proposed and similar frameworks. Such statistics could be incorporated into cyber models, ultimately leading to a more rational understanding of cyber attack and defense.en_US
dc.description.urihttp://archive.org/details/developingstanda1094542581
dc.publisherMonterey, California: Naval Postgraduate Schoolen_US
dc.rightsCopyright is reserved by the copyright owner.en_US
dc.titleDeveloping standard exercises and statistics to measure the impact of cyber defensesen_US
dc.typeThesisen_US
dc.contributor.departmentHomeland Security
dc.subject.authorIncident Responseen_US
dc.subject.authorCyber Exercisesen_US
dc.subject.authorMetricsen_US
dc.subject.authorCyber Investment Modelingen_US
dc.description.serviceCivilian, Department Of Homeland Securityen_US
etd.thesisdegree.nameMaster of Science in Cyber Systems and Operationsen_US
etd.thesisdegree.levelMastersen_US
etd.thesisdegree.disciplineCyber Systems And Operationsen_US
etd.thesisdegree.grantorNaval Postgraduate Schoolen_US


Files in this item

Thumbnail

This item appears in the following Collection(s)

Show simple item record