The vulnerability of cyber-physical systems to cyber attack is well known, and the requirement to build cyber resilience into these systems has been firmly established. The key challenge this paper addresses is that maturing this discipline requires the development of techniques, tools, and processes for objectively, rigorously, and quantitatively measuring the attributes of cyber resilience. Researchers and program managers need to be able to determine if the implementation of a resilience solution actually increases the resilience of the system. In previous work, a table top exercise was conducted using a notional heavy vehicle on a fictitious military mission while under a cyber attack. While this exercise provided some useful data, more and higher fidelity data is required to refine the measurement methodology. This paper details the efforts made to construct a cost-effective experimentation infrastructure to provide such data. It also presents a case study using some of the data generated by the infrastructure.
翻译:网络物理系统易受网络攻击的脆弱性已广为人知,构建系统网络弹性的需求也已得到充分确立。本文解决的关键挑战在于:要推动该学科成熟,需要开发能够客观、严谨、定量测量网络弹性属性的技术、工具和流程。研究人员和项目管理者需要能够判断某项弹性解决方案的实施是否真正提升了系统的弹性。此前工作中,我们以假想重型车辆执行虚构军事任务时遭受网络攻击为场景,开展了一次桌面推演。尽管该推演提供了一些有用数据,但为完善测量方法仍需更多且保真度更高的数据。本文详细阐述了为获取此类数据而构建经济高效实验基础设施的工作,并展示了利用该基础设施生成的部分数据开展的案例研究。