Military Science and Tactics

Military Science and Tactics

Cyber Resilience Model of Defense Systems and Products

Document Type : Research/Original/Regular Article

Authors
Rasool Ramezani Dehaghi 1
Ali Mohammad Aminzadeh 2
1 Ph.D. in Strategic Management of Cyber ​​Space, Lecturer and Faculty Member of Khatam Al-Anbia Air Defense University, Tehran, Iran.
2 Ph.D. in Strategic Management of Cyber ​​Space, Director of Cyber ​​Defense Center of Information Exchange Security Industries, Tehran, Iran.
10.22034/qjmst.2023.551755.1693
Abstract
Objective: The main goal of this research is to present the model of cyber resilience of defense systems and its sub-goals are to explain the cyber threats of defense systems, and to explain the dimensions, components and indicators of cyber resilience of defense systems.
Method: The current research is categorized as descriptive/analytical research with an exploratory perspective. Data collection was done using the grounded theory method and interview tool, and the questionnaire tool was used to determine the importance of the indicators and select the final indicators. In order to check the significance of the relationship between dimensions, components and indicators, factor analysis method and Smart P.L.S. software was used. The statistical population of the research includes 30 experts in this field and the sample population is considered as a whole number.
Findings: The cyber resilience model of defense systems was presented in the dimensions of supervision and leadership with 4 components and 21 indicators, control dimension with 4 components and 16 indicators, process and operation dimension with 3 main components and 17 indicators. The factor loading coefficients for the three mentioned dimensions were obtained as 0.921, 0.917 and 0.926, respectively, which is a sign of the high importance of these factors in increasing cyber resilience.
Conclusion: Cyber resilience of defense systems includes measures that defense organizations must take to resist cyber incidents and recover quickly after interruptions. Therefore, in order to be able to resist attacks, incidents or cyber threats, defense systems must be resilient in the three dimensions of supervision and leadership, control and automation, as well as the dimension of process and operations.
Keywords
Cyber resilience
Defense systems
Cyber threats
Cyber Vulnerabilities
  • بت شکن، بهمن. (1396). بررسی مهندسی تاب‌‌آوری سایبری در فضای سایبری، سومین اجلاس ملی علوم و مهندسی رایانه و فناوری اطلاعات، اصفهان: دانشگاه اصفهان، دانشکده مهندسی رایانه.
  • سعادتی، رضا. (1400). شناسایی و اولویت‌‌بندی عوامل موثر بر تاب‌‌آوری سایبری ارتش جمهوری اسلامی ایران، پایان‌‌نامه کارشناسی ارشد، تهران: دافوس آجا.
  • علاقه بند، علی. (1400). مبانی نظری و اصول مدیریت آموزشی، چاپ سی‌‌ام، تهران: نشر روان.
  • مظفری، شهرام. ، پورمنصوری، رضوان. و پورمنصوری، جمال. (2019). احصاء شاخص‌‌های تاب‌‌آوری بر کاهش آسیب‌‌پذیری سیستم‌‌های کنترل صنعتی در تهدیدات سایبری، چهارمین کنفرانس بین المللی تحقیقات حوزه اقتصاد و مدیریت، فرانسه: پاریس.
  • Annarelli, A., Nonino, F., & Palombi, G. (2020). Understanding the management of cyber resilient systems. Computers & industrial engineering, 149, 106-
  • Armenia, S., Angelini, M., Nonino, F., Palombi, G., & Schlitzer, M. F. (2021). A dynamic simulation approach to support the evaluation of cyber risks and security investments in SMEs. Decision Support Systems, 147, 113-
  • Benz, M., Chatterjee, D. (2020). Calculated risk? A cybersecurity evaluation tool for SMEs. Horiz. 2020, 63, 531–540.
  • Bodeau, D., Graubart, R., Heinbockel, W. & Laderman, E. (2015). Cyber Resiliency Engineering Aid Guidance on Applying Cyber Resiliency Techniques, The MITRE Corporation.
  • Carias, J. F., Borges, M. R. S., Labaka, L., Arrizabalaga, S., Hernantes, J. (2020). The Order of the Factors DOES Alter the Product: Cyber Resilience Policies’ Implementation Order. In Conference on Complex, Intelligent, and Software Intensive Systems; Springer: Burgos, Spain, 2020; pp. 306–315.
  • Center for Internet Security (CIS), (2019). CIS Controls, V 7. 1 East Greenbush, NY, USA, 2019.
  • Colbert, E. J. M., & Kott, A. (2016). Cyber-security of SCADA and Other Industrial Control Systems, Advances in Information Security, 63, doi: 10. 1007/978-3-319-32125-7
  • Conklin, W. A. & Shoemaker, D. (2017). Cyber-Resilience: Seven Steps for Institutional Survival. EDPACS, 55(2), 14-22.
  • DSB (2013), Defense Science Board. Task force report: resilient military systems and the advanced cyber threat, USA.
  • Deutscher, S. A., Bohmayr, W., Asen, A. (2017). Building a Cyberresilient Organization; BCG Perspectives: Boston, MA, USA, 2017.
  • Financial Stability Institute (FSI), (2018). Cyber resilience practices, Insights, no. 21, avalible in fsicmigration@bis. org.
  • Pinckard, J., Rattigan, M., & Vrtis, R. (2016). Mapping of the Federal Financial Institutions Examination Council (FFIEC) Cybersecurity Assessment Tool (CAT) to the Cyber Resilience Review (CRR).
  • Gourisetti, S. N. G., Mix, S., Mylrea, M., Bonebrake, C., Touhiduzzaman, M. (2019). Secure Design and Development Cybersecurity Capability Maturity Model (SD2-C2M2). In Proceedings of the Northwest Cybersecurity Symposium 2019, New York, NY, USA, 8 April 2019; pp. 1–9.
  • Internet Security Threat Report; Symantec: Sunnyvale, CA, USA, (2019). Volume 24.
  • Kott, A., Linkov, I.  (2019). Cyber Resilience of Systems and Networks, Springer Science+Business Media New York.
  • Linkov, I. , Eisenberg, D. A. , Plourde, K. , Seager P. (2013). Resilience metrics for cyber systems. Springer Science+Business Media New York (outside the USA) DOI: 10. 1007/s10669-013-9485-y.
  • NIST (2021), National Institute of Standards and Technology. Developing Cyber-Resilient Systems: A Systems Security Engineering Approach, (SP) 800-160 Volume 2, Revision 1, Retrieved from  https: //csrc. nist. gov/publications/detail/sp/800-160/vol-2-rev-1/final
  • Ross, R., Graubart, R., Bodeau, D. & Mcquaid, R. (2018). Systems Security Engineering: Cyber Resiliency Considerations for the Engineering of Trustworthy Secure Systems, (NIST) National Institute of Standards and Technology.
  • Sharkov, G. (2016). From cybersecurity to collaborative resiliency. In Proceedings of the 2016 ACM Workshop on Automated Decision Making for Active Cyber Defense, Vienna, Austria, 24–28 October 2016; pp. 3–9.
  • Wei, D., & Ji, K. (2015). Resilient industrial control system (RICS): Concepts, formulation, metrics, and insights. 3rd International Symposium on Resilient Control Systems (ISRCS), 2015.