Cyber resilience is the ability of a system to resist and recover from a cyber attack, thereby restoring the system's functionality. Effective design and development of a cyber resilient system requires experimental methods and tools for quantitative measuring of cyber resilience. This paper describes an experimental method and test bed for obtaining resilience-relevant data as a system (in our case -- a truck) traverses its route, in repeatable, systematic experiments. We model a truck equipped with an autonomous cyber-defense system and which also includes inherent physical resilience features. When attacked by malware, this ensemble of cyber-physical features (i.e., "bonware") strives to resist and recover from the performance degradation caused by the malware's attack. We propose parsimonious mathematical models to aid in quantifying systems' resilience to cyber attacks. Using the models, we identify quantitative characteristics obtainable from experimental data, and show that these characteristics can serve as useful quantitative measures of cyber resilience.
翻译:网络弹性是系统抵御网络攻击并从中恢复,从而恢复系统功能的能力。有效设计与开发具有网络弹性的系统,需要能够定量度量网络弹性的实验方法与工具。本文描述了一种实验方法与测试平台,可在可重复、系统化的实验中,获取系统(本文中为卡车)沿其路径运行时与弹性相关的数据。我们对装备有自主网络防御系统且具备固有物理弹性特征的卡车进行建模。当受到恶意软件攻击时,这种网络-物理特征组合体(即"bonware")会努力抵抗并恢复因恶意软件攻击导致的性能下降。我们提出了简约数学模型,以帮助量化系统对网络攻击的弹性。借助这些模型,我们识别出可从实验数据中获取的定量特征,并证明这些特征可作为网络弹性的有效定量度量指标。