Digital Library

of the European Council for Modelling and Simulation

Title:	*Modeling And Simulation Of Cooperation And Learning In Cyber Security Defense Teams*
Authors:	Rina Mary Mazza, Pasquale Legato
Published in:	(2017).ECMS 2017 Proceedings Edited by: Zita Zoltay Paprika, Péter Horák, Kata Váradi, Péter Tamás Zwierczyk, Ágnes Vidovics-Dancs, János Péter Rádics European Council for Modeling and Simulation. doi:10.7148/2017 ISBN: 978-0-9932440-4-9/ ISBN: 978-0-9932440-5-6 (CD) 31st European Conference on Modelling and Simulation, Budapest, Hungary, May 23^rd – May 26^th, 2017
Citation format:	Rina Mary Mazza, Pasquale Legato (2017). Modeling And Simulation Of Cooperation And Learning In Cyber Security Defense Teams, ECMS 2017 Proceedings Edited by: Zita Zoltay Paprika, Péter Horák, Kata Váradi, Péter Tamás Zwierczyk, Ágnes Vidovics-Dancs, János Péter Rádics European Council for Modeling and Simulation. doi: 10.7148/2017-0502
DOI:	https://doi.org/10.7148/2017-0502
Abstract:	Cyber security analysts may be organized in teams to share skills and support each other upon the occurrence of cyber attacks. Team work is expected to enforce the mitigation capability against unpredictable attacks addressed against a set of cyber assets requiring protection. A conceptual model for evaluating the expected performances of cooperating analysts by reproducing their learning process within a team is proposed. Analytical approaches to solve the underlying state-space model under stochastic evolution and discrete-event simulation are both discussed. The basic assumption is that a set of regeneration points corresponds to skill achievement through learning. A Simulation-based Optimization (SO) tool ranging from the inner level modeling of the cooperation-based learning process to the outer assignment of analysts to assets is then presented. Team formation may be supported by the SO tool for obtaining the team composition, in terms of individuals and skills, that maximizes system performance measures. Numerical results are reported for illustrative purposes.
Full text: