Quantitative Measurement of Cyber Resilience: A Tabletop Exercise

Author(s):

Sidney C Smith, Stephen Raio, Robert F Erbacher, MJ Weisman, Travis W Parker, and Jason E Ellis

Abstract:

The vulnerability of Army cyber-physical systems to cyber attack is well known, and the requirement to build cyber resilience into these systems has been firmly established. The key challenge this report addresses is that maturing this discipline requires the development of techniques, tools, and processes for objectively, rigorously, and quantitatively measuring the attributes of cyber resilience. Researchers and program managers need to be able to determine if the implementation of a cyber-resilience solution actually increases the cyber resilience of the system. There are several methodologies proposed in the literature to score or measure cyber resilience, which we will review. In addition, there are a few examples of how to use some of these methodologies; however, the literature does not contain detailed attempts to measure cyber resilience. This report documents a tabletop exercise conducted using a notional heavy vehicle on a fictitious military mission while under a cyber attack.