Cascading Attack Damage

What is the real cost of a cyber-attack?

The cost of the service attacked may not reflect the real amount of damage.

Many other services may rely on the attacked service, causing a cascade.

How can we determine the real cost associated with the cascade?

JAC Defines Values, Dependencies, and

Damage.

Values A Value defines an object in JAC. The Value is used to calculate the value of

damage to an object.

Dependencies A dependency is defined between two

objects with defined Values. The dependency of A

on B is defined as the percentage of A that requires B.

Damage You attack an object by assigning it

Damage. Damage is defined as the percentage

of the object that is damaged.

System Architecture

Remote Java Beans (planned)

GUI “Thick” Clients

WebServlet

Jess RuleEngine

EconomicDamage

Coefficient Model

Local Java Beans (planned)

RMI

Rete EngineQueries

Parsing / RuleGenerator

Web “Thin” Clients (planned)

Jess Rule Engine All objects are turned into Jess facts. Rules model the cascade effect.

JAC

Adding Values You can Add an Object to the Domain by

adding a Value:

Adding Dependencies You can add a dependency between any

two objects with defined Values.

Adding Dependancies You can provide a weight to the

dependency. This weight is the percentage of the affect on the affected object.

Dependency Modeling JAC can provide a graphical

model of your dependency structure.

Adding Damage You can attack any object with an assigned

value by assigning it damage.

Adding Damage You assign damage as a percent of the

attack object.

Removing Values, Affects, & Damage

You can remove any value, dependency, or damage by selecting it and clicking the appropriate remove button.

Cascading Damage Once you have defined Values,

Dependencies, and Added damage for at least one object in the domain, you can cascade the attack.

Cascading Damage

Cascading Damage Damage is tracked, as well which

dependencies cause the cascade.

Cascade Modeling JAC can provide a graphical representation

of the damage cascade of an attack.

Cascading Damage The value of damage to each object is

determined, as is total attack damage.

Future Work Detailed economic model for dependency

coefficients. Compensation between dependencies. Temporal modeling. Java Bean representation of rules, allowing

for flexibility in software architecture. Jess / Rete engine optimizations