A Model to Measure Effectiveness in Cyber Security Situational Awareness

Document Type : Computer and Network Security-Ghaemi

Authors

• Motahareh Dehghan ¹
• AmirAbbas Mahdi Zadeh ²
• Babak Sadeghian ²

¹ Tarbiat Modares University

² Amirkabir University of Technology

10.22067/cke.2024.83723.1101

Abstract

Nowadays, the number of cyberattacks and, consequently, the risk of them is increasing significantly. So, it is vital to be aware of the cybersecurity situation. This paper provides a model to measure the success or effectiveness of the organization's security missions, that is, to determine whether security events such as the occurrence of an attack or the selection of countermeasures have been effective on the success of organizational missions. Two components are considered as inputs for this purpose. The first one is the network dependency graph which demonstrates how different assets in the network are dependent on each other and with what intensity or weight they affect each other. Another component is the mission dependency graph which specifies the relation between organizational assets, tasks, functions, and mission objectives. It also specifies the impact of the assets on the organizational tasks, functions, and mission objectives.

Previous researches focused more on determining the impact of attacks on different assets. However, this paper aims to assess this impact by considering the organizational mission. This model is proposed in such a way that its components are separable. It helps different organizations with specific goals and different requirements to use this model so that they can personalize and customize its different components. This model can be employed for critical asset recognition. Moreover, it enables us to know which countermeasures are more effective in terms of the organizational mission.

Keywords

• Measure of Effectiveness
• cyberattacks
• situational awareness
• impact assessment
• mission
• mission dependency graph
• network dependency graph

Main Subjects

• Computer and Network Security

---