Cyber resilience recovery model to combat zero-day malware attacks. Issue 61 (August 2016)

• Record Type: Journal Article
• Authors: Tran, Hiep; Campos-Nanez, Enrique; Fomin, Pavel; Wasek, James
• Is Part Of: Computers & security. Issue 61(2016)
• Page Start: 19
• Page End: 31
• Publication Date: 2016-08
• Subjects: Cyber resilience -- Zero-day malware -- Incident response and recovery -- Cyber investment strategies -- Cyber epidemic; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2016.05.001
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: This paper presents the implementation of an epidemiological model to combat a zero-day outbreak within a closed network. The proposed dynamic Cyber Resilience Recovery Model (CRRM) is used to combat the simulated outbreak and minimize disruptions to business operations. CRRM combines the National Institute of Standards and Technology Special Publication 800-61 incident response life cycle and Susceptible-Infected-Quarantined-Recovered epidemiological model. It provides insights into the strengths and weaknesses of current recovery processes and presents possible solutions for addressing changing cybersecurity threats. Evaluation results demonstrate that CRRM accurately simulates malware outbreaks on a network and has the potential to serve as a valuable tool for supporting decision-making and technological investments that improve cyber resilience.