Several approaches have been used to assess the performance of cyberphysical systems and their exposure to various types of risks. Such assessments have become increasingly important as autonomous attackers ramp up the frequency, duration and intensity of threats while autonomous agents have the potential to respond to cyber-attacks with unprecedented speed and scale. However, most assessment approaches have limitations with respect to measuring cyber resilience, or the ability of systems to absorb, recover from, and adapt to cyberattacks. In this paper, we provide an overview of several common approaches, discuss practical challenges and propose research directions for the development of effective cyber resilience measures.
翻译:在评估网络物理系统的性能及其面临各类风险的情况时,采用了若干方法,这些评估已变得日益重要,因为自主攻击者加快了威胁的频率、持续时间和强度,而自主代理人则有可能以前所未有的速度和规模应对网络攻击,然而,大多数评估方法在衡量网络复原力或系统吸收、从网络攻击中恢复和适应这些攻击的能力方面都存在局限性。本文概述了若干共同方法,讨论了实际挑战,并为制定有效的网络复原力措施提出了研究方向。