A simulation optimisation-based approach for team building in cyber security. (2016)

• Record Type: Journal Article
• Authors: Legato, Pasquale; Mazza, Rina Mary
• Is Part Of: International journal of simulation and process modelling. Volume 11:Number 6(2016)
• Page Start: 430
• Page End: 442
• Publication Date: 2016
• Subjects: simulation optimisation -- cyber security -- team formation -- collaboration -- team building -- attack tolerance -- system performance degradation -- resource training -- knowledge acquisition -- resource assignment -- make or buy; Management -- Computer simulation -- Periodicals; Mathematical models -- Periodicals; Operations research -- Periodicals; Simulation methods -- Periodicals; 003.05
• Languages: English
• ISSNs: 1740-2123

Abstract

In this study we present a simulation optimisation (SO) approach based on direct search methods applied to cyber security. The problem consists of investigating if and when human resources (i.e., analysts) in a company should: 1) work alone; 2) work in consultation with teammates when responding to different attack rates and types targeting a predefined set of company cyber assets. The objective of the study is to evaluate overall attack tolerance with respect to system performance degradation and both resource training and knowledge gain. Numerical examples and experiments related to resource assignment and team formation are presented to show how the SO model can support company managers when grappling with a very common decision: 'make or buy' cyber security knowhow.