Army Project Develops First Cyber Agility Framework to Train Officials to Out-Maneuver Cyber Attacks
June 13, 2019 | U.S. Army Research LaboratoryEstimated reading time: 2 minutes
To help train government and industry organizations on how to prevent cyberattacks, as part of a research project for the U.S. Army, scientists at The University of Texas at San Antonio, developed the first framework to score the agility of cyber attackers and defenders.
Image Caption: A U.S. Army project with scientists at The University of Texas at San Antonio developed the first framework to score the agility of cyber attackers and defenders (U.S. Army - Shutterstock graphic)
"The DOD and U.S. Army recognize that the cyber domain is as important a battlefront as ground, air and sea," said Dr. Purush Iyer, division chief, network sciences at Army Research Office, an element of the U.S. Army Combat Capabilities Development Command's Army Research Laboratory. "Being able to predict what the adversaries will likely do provides opportunities to protect and to launch countermeasures. This work is a testament to successful collaboration between academia and government."
The framework developed by the researchers will help government and industry organizations visualize how well they out-maneuver attacks. Their work is published in IEEE Transactions on Information Forensics and Security, a top journal for cybersecurity.
"Cyber agility isn't just about patching a security hole, it's about understanding what happens over time. Sometimes when you protect one vulnerability, you expose yourself to 10 others," said Jose Mireles, who works for the DOD and co-developed this first-known framework as part of his UTSA master's thesis. "In car crashes, we understand how to test for safety using the rules of physics. It is much harder to quantify cybersecurity because scientists have yet to figure out what are the 'rules of cybersecurity.' Having formal metrics and measurement to understand the attacks that occur will benefit a wide range of cyber professionals."
To develop quantifiable metrics, Mireles collaborated with a fellow UTSA student Eric Ficke, researchers at Virginia Tech, and a researcher at CCDC ARL and the U.S. Air Force Research Laboratory.
The project under the supervision of UTSA Professor Shouhuai Xu, who serves as the director of the UTSA Laboratory for Cybersecurity Dynamics. Together, they used a honeypot—a computer system that lures real cyber-attacks—to attract and analyze malicious traffic according to time and effectiveness. As both attackers and defenders created new techniques, the researchers were able to better understand how a series of engagements transformed into a new adaptive and responsive agile pattern or what they called an evolution generation.
"The cyber agility framework is the first of its kind and allows cyber defenders to test out numerous and varied responses to an attack," Xu said. "This is an outstanding piece of work as it will shape the investigation and practice of cyber agility for the many years to come."
Mireles added, "A picture or graph in this case is really worth more than 1,000 words. Using our framework, security professionals will recognize if they're getting beaten or doing a good job against an attacker."
Suggested Items
Japanese Joint Research Group win Prime Minister’s Award with Ultra High-performance Computing Platform
03/25/2024 | FujitsuA Japanese consortium of research partners including RIKEN, the National Institute of Advanced Industrial Science and Technology (AIST), the National Institute of Information and Communications Technology (NICT), Osaka University, Fujitsu Limited, and Nippon Telegraph and Telephone Corporation (NTT) have been recognized with the prestigious Prime Minister’s Award.
Keysight Accelerates Its 6G Efforts with NVIDIA 6G Research Cloud Platform
03/22/2024 | Keysight Technologies, Inc.Keysight Technologies, Inc. is collaborating on the new NVIDIA 6G Research Cloud Platform, which includes the NVIDIA Aerial Omniverse Digital Twin, an open, flexible, and interconnected framework of network emulation resources offering researchers a comprehensive tool suite on which to develop new adaptations of artificial intelligence (AI) for radio access networks (RAN).
Foxconn Recognized as Top 100 Global Innovators 2024
03/07/2024 | FoxconnHon Hai Technology Group (Foxconn) announced it has been named a Top 100 Global Innovators™ 2024. The annual list from Clarivate™, a global leader in providing transformative intelligence, identifies organizations leading the world in technology research and innovation.
Siemens Joins Semiconductor Education Alliance to Address Skills and Talent Shortage in Global Semiconductor Industry
03/04/2024 | SiemensSiemens Digital Industries Software announced it has joined the Semiconductor Education Alliance to help build and nurture thriving communities of practice across the integrated circuit (IC) design and Electronic Design Automation (EDA) industries, from teachers and schools to universities, publishers, educational technology companies and research organizations.
Siemens Joins Semiconductor Education Alliance to Address Skills and Talent Shortage in Global Semiconductor Industry
02/29/2024 | Siemens Digital IndustriesSiemens Digital Industries Software announced today it has joined the Semiconductor Education Alliance to help build and nurture thriving communities of practice across the integrated circuit (IC) design and Electronic Design Automation (EDA) industries, from teachers and schools to universities, publishers, educational technology companies and research organizations.