A methodology for quantitative measurement of cyber resilience (QMOCR)

Abstract

This report describes a methodology for measuring—quantitatively and experimentally—the cyber resilience of a system when subjected to a cyber attack. We use the term Quantitative Measurement of Cyber Resilience (QMOCR) to refer to this methodology. The methodology is an outcome of the eponymous research project performed by the US Army Combat Capabilities Development Command Army Research Laboratory during the period of April 2021 through March 2023 in collaboration with the Pennsylvania State University Applied Research Laboratory and the University of California, Irvine. Resilience continues to gain attention as a key property of cyber and cyber-physical systems, for the purposes of cyber defense. A key challenge in the field of cyber resilience is quantifying or measuring resilience. Developers and buyers of a system must be able to quantify the cyber resilience of the system they develop or purchase. We recommend application of the QMOCR methodology especially when an actual system, its prototype, or a working, executable model (physical, digital, or digital–physical) is available.

Citation

Kott, A., Weisman, M. J., Vandekerckhove, J., Ellis, J. E., Parker, T. W., Murphy, B. J., & Smith, S. (2023). A methodology for quantitative measurement of cyber resilience (QMOCR). Army Research Labs Technical Report.

Bibtex

@techreport{kott_etal:2023:quantitative,
    title   = {{A} methodology for quantitative measurement  of cyber resilience ({Q}{M}{O}{C}{R})},
    author  = {Kott, Alexander and Weisman, Michael J. and Vandekerckhove, Joachim and Ellis, Jason E. and Parker, Travis W. and Murphy, Brian J. and Smith, Sydney},
    year    = {2023},
    journal = {Army Research Labs Technical Report}
}