Metrics Towards Measuring Cyber Agility

摘要: In cyberspace, evolutionary strategies are commonly used by both attackers and defenders. For example, an attacker’s strategy often changes over the course of time, as new vulnerabilities discovered and/or mitigated. Similarly, a defender’s time. These may or not be in direct response to change opponent’s strategy. any case, it is important have set quantitative metrics characterize understand effectiveness attackers’ defenders’ strategies, which reflect their cyber agility . Despite its clear importance, few systematic been developed quantify this paper, we propose first metric framework for measuring terms dynamic evolution attacks defenses. The proposed generic applicable transform relevant, quantitative, conventional static security (e.g., false positives negatives) into capture dynamics system behaviors. order validate usefulness framework, conduct case studies on defenses using two real-world datasets. We discuss limitations current work identify future research directions.