CSIAC

Cyber Security and Information Systems Information Analysis Center

/ Journal Issues / Focus on Air Force Research Laboratory’s Information Directorate / Command and Control of Proactive Defense

Command and Control of Proactive Defense

Published in Journal of Cyber Security and Information Systems
Volume: 4 Number: 1 - Focus on Air Force Research Laboratory’s Information Directorate
Authors: David Last, David Myers, Matthew Heffernan, Meghan Caiazzo and Captain Nicholas Paltzer
| Leave a Comment

Conclusion

In the current state of the art of network defense, a CSA must overcome the attacker’s asymmetric advantage. Proactive application of defenses puts the attacker and defender on equal footing. In order to generate effective defense plans, it is vital to characterize available defenses. Configurations generated based on these characterizations maximize security while minimizing impact on missioncritical resources. The C2PD program, as illustrated in Figure 3. C2PD Technical Scope, generates these configurations and provides them to a CSA for human-in-the-loop decision making. The selected defense configuration is automatically deployed on the network via the C2PD framework. C2PD advances the state of the art of network defense by greatly decreasing the time required to develop a defensive posture as well as increasing the effectiveness of these postures.

Bibliography

[1] H. Okhravi, M. Rabe, T. Mayberry, W. Leonard and W. Streilein, “Survey of Cyber Moving Target Techniques,” Massachu

[2] P. K. Manadhata and J. M. Wing, “An attack surface metric,” Software Engineering, IEEE Transactions on, vol. 37, no. 3, pp. 371-386, 2011.

[3] P. Manadhata and J. M. Wing, “Measuring a system’s attack surface,” DTIC Document, 2004.

[4] O. H. Alhazmi and Y. K. Malaiya, “Prediction capabilities of vulnerability discovery models.,” in Reliability and Maintainability Symposium, 2006. RAMS’06. Annual, IEEE, 2006, pp. 86-91.

[5] J. Kim, Y. Malaiya and I. Ray, “Vulnerability discovery in multi-version software systems,” in High Assurance Systems Engineering Symposium, 2007. HASE’07. 10th IEEE, IEEE, 2007, pp. 141-148.

[6] D. Last, “Using Historical Software Vulnerability Data to Forecast Future Vulnerabilities,” in Resilience Week 2015, Proceedings of , Philadelphia, 2015.

[7] M. Carvahlo, T. C. Eskridge, K. Ferguson-Walter, N. Paltzer, D. Myers and D. Last, “MIRA: A Support Infrastructure for Cyber Command and Control Operations,” in Resilience Week 2015, Proceedings of, Philadelphia, 2015.

Release Statement

Distribution A: Approved for public release; distribution is unlimited. Case number 88ABW-2015-4680.

Authors

David Last
David Last
David Last earned his Bachelor’s and Doctorate degrees in Electrical and Computer Engineering from Auburn University in Auburn, Alabama. His research interests include computer and network security and resiliency and moving target defenses.
David Myers
David Myers
David Myers received his B.S., M.S., and Ph.D. in Industrial and Systems Engineering from the University at Buffalo, The State University of New York. His research interests are in the application of multi-criteria decision making for military and government domains.
Matthew Heffernan
Matthew Heffernan
Matthew Heffernan received his B.S. in Computer Engineering from Rochester Institute of Technology and is currently pursuing an M.S. in Computer Science from Syracuse University. His most recent research has been in data visualization and command and control systems.
Meghan Caiazzo
Meghan Caiazzo
Meghan Caiazzo received her B.S. in Computer Science and Mathematics from St. Joseph’s College and her M.S. in Cyber Security from New York University Polytechnic School of Engineering.
Captain Nicholas Paltzer
Captain Nicholas Paltzer
Captain Nicholas Paltzer (U.S. Air Force) has been a member of the United States Air Force for more than 20 years and has an extensive background intel e-communications and networking in both fixed base and deployed environments. He received his B.S. from the University of South Florida and his M.S from the Air Force Institute of Technology, both in Computer Engineering.

Reader Interactions

Leave a Comment