Towards Fundamental Science of Cyber Security

摘要: Terms like “Science of Cyber” or “Cyber Science” have been appearing in literature with growing frequency, and influential organizations initiated research initiatives toward developing such a science even though it is not clearly defined. We propose to define the domain cyber security by noting most salient artifact within security—malicious software—and defining as comprised phenomena that involve malicious software (as well legitimate protocols used maliciously) compel computing device network devices perform actions desired perpetrator (the attacker) generally contrary intent policy) owner operator defender) device(s). further study relations—preferably expressed theoretically-grounded models—between attributes, structures dynamics of: violations policy; under attack; defenders’ tools techniques; attackers’ techniques where plays central role. offer simple formalism these key objects systematically derive classification primary problem classes science.