|
Digital
Library of the European Council for Modelling and Simulation |
Title: |
Modeling And Simulation Of Cooperation And Learning
In Cyber Security Defense Teams |
Authors: |
Rina Mary Mazza, Pasquale
Legato |
Published in: |
(2017).ECMS 2017 Proceedings
Edited by: Zita Zoltay
Paprika, Péter Horák, Kata Váradi, Péter Tamás Zwierczyk, Ágnes Vidovics-Dancs, János Péter Rádics European Council for Modeling and Simulation. doi:10.7148/2017 ISBN:
978-0-9932440-4-9/ ISBN:
978-0-9932440-5-6 (CD) 31st European Conference on Modelling and Simulation, Budapest, Hungary, May 23rd
– May 26th, 2017 |
Citation
format: |
Rina Mary Mazza, Pasquale Legato
(2017). Modeling And Simulation Of Cooperation And Learning In Cyber Security
Defense Teams, ECMS 2017 Proceedings Edited by: Zita
Zoltay Paprika, Péter Horák, Kata Váradi, Péter Tamás Zwierczyk, Ágnes Vidovics-Dancs, János Péter Rádics European Council for Modeling and Simulation. doi: 10.7148/2017-0502 |
DOI: |
https://doi.org/10.7148/2017-0502 |
Abstract: |
Cyber
security analysts may be organized in teams to share skills and support each
other upon the occurrence of cyber attacks. Team work
is expected to enforce the mitigation capability against unpredictable
attacks addressed against a set of cyber assets requiring protection. A
conceptual model for evaluating the expected performances of cooperating
analysts by reproducing their learning process within a team is proposed.
Analytical approaches to solve the underlying state-space model under
stochastic evolution and discrete-event simulation are both discussed. The
basic assumption is that a set of regeneration points corresponds to skill
achievement through learning. A Simulation-based
Optimization (SO) tool ranging from the inner level modeling of the
cooperation-based learning process to the outer assignment of analysts to
assets is then presented. Team formation may be supported by the SO
tool for obtaining the team composition, in terms of individuals and skills,
that maximizes system performance measures. Numerical results are reported
for illustrative purposes. |
Full
text: |