NDLI: A systems engineering approach for crown jewels estimation and mission assurance decision making

Content Provider	IEEE Xplore Digital Library
Author	Musman, S. Tanner, M. Temin, A. Elsaesser, E. Loren, L.
Copyright Year	2011
Description	Author affiliation: MITRE Corp, McLean, Va. USA (Musman, S.; Tanner, M.; Temin, A.; Elsaesser, E.; Loren, L.)
Abstract	Understanding the context of how IT contributes to making missions more or less successful is a cornerstone of mission assurance. This paper describes a continuation of our previous work that used process modeling to allow us to estimate the impact of cyber incidents on missions. In our previous work we focused on developing a capability that could work as an online process to estimate the impacts of incidents that are discovered and reported. In this paper we focus instead on how our techniques and approach to mission modeling and computing assessments with the model can be used offline to help support mission assurance engineering. The heart of our approach involves using a process model of the system that can be run as an executable simulation to estimate mission outcomes. These models not only contain information about the mission activities, but also contain attributes of the process itself and the context in which the system operates. They serve as a probabilistic model and stochastic simulation of the system itself. Our contributions to this process modeling approach have been the addition of IT activity models that document in the model how various mission activities depend on IT supported processes and the ability to relate how the capabilities of the IT can affect the mission outcomes. Here we demonstrate how it is possible to evaluate the mission model offline and compute characteristics of the system that reflect its mission assurance properties. Using the models it is possible to identify the crown jewels, to expose the systems susceptibility to different attack effects, and evaluate how different mitigation techniques would likely work. Being based on an executable model of the system itself, our approach is much more powerful than a static assessment. Being based on business process modeling, and since business process analysis is becoming popular as a systems engineering tool, we also hope our approach will push mission assurance analysis tasks into a framework that allows them to become a standard systems engineering practice rather than the “off to the side” activity it currently is.
Starting Page	210
Ending Page	216
File Size	340223
Page Count	7
File Format	PDF
ISBN	9781424499052
e-ISBN	9781424499069
DOI	10.1109/CICYBS.2011.5949403
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2011-04-11
Publisher Place	France
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Context Crown Jewels Analysis Computational modeling Cyber Risk Management Cyber Mission Models Threat Susceptibility Analysis Mission Impact Assesment Cyber Risk Assessment Process Models Quality function deployment Risk management Mission Assurance BPM Context modeling
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A Cyber Mission Impact assessment tool

Computing the impact of cyber attacks on complex missions

CyMRisk: An approach for computing mission risk due to cyber attacks

A Systematic Comprehensive Computational Model for Stake Estimation in Mission Assurance - Applying Cyber Security Econometrics System (CSES) to Mission Assurance Analysis Protocol (MAAP)

Data Quality Management using Business Process Modeling

Measuring the Utility of a Cyber Incident Mission Impact Assessment (CIMIA) Process for Mission Assurance

Threat Assessment, perform Decision Making and execute

An integrated approach for risk-assessment analysis in a manufacturing process using FMEA and DES

Risk assessment model for TPCM based on threat analysis

A systems engineering approach for crown jewels estimation and mission assurance decision making

Similar Documents

A Cyber Mission Impact assessment tool

Computing the impact of cyber attacks on complex missions

CyMRisk: An approach for computing mission risk due to cyber attacks

A Systematic Comprehensive Computational Model for Stake Estimation in Mission Assurance - Applying Cyber Security Econometrics System (CSES) to Mission Assurance Analysis Protocol (MAAP)

Data Quality Management using Business Process Modeling

Measuring the Utility of a Cyber Incident Mission Impact Assessment (CIMIA) Process for Mission Assurance

Threat Assessment, perform Decision Making and execute

An integrated approach for risk-assessment analysis in a manufacturing process using FMEA and DES

Risk assessment model for TPCM based on threat analysis

A systems engineering approach for crown jewels estimation and mission assurance decision making